Method and apparatus for authorizing remote internet access

• US 5,898,780 A
• Filed: 10/09/1996
• Issued: 04/27/1999
• Est. Priority Date: 05/21/1996
• Status: Expired due to Term

• Current Assignee: Ipass Incorporated (Pareteum Corp.)
• Original Assignee: GoRemote Internet Communications, Inc. (Pareteum Corp.)
• Inventors: Wang, Tao, Liu, Lynn Y., Lu, Juan
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Time in patent office: 930 Days
• Field of Search: 380/25, 380/23, 380/30, 370/200, 379/88.17, 705/18, 707/10
• US Class Current: 713/155
• CPC Class Codes: G06Q 10/10 Office automation, e.g. computer aided management of electronic mail or groupware electronic mail protocols H04L29/06 ; arrangements for user-to-user messaging in packet-switching networks, e.g. e-mail or instant messages, H04L41/00; Time management, e.g. calendars, reminders, meetings or time accounting organizing, planning, scheduling or allocating time G06Q10/06
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 30/04 Billing or invoicing , e.g. tax processing in connection with a sale
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 30/0645 Rental, i.e. leasing
• CPC Class Codes: H04L 12/14 Metering, charging or billing arrangements specially adapted for data wireline or wireless communications payment schemes, architectures or protocols per se G06Q20/00
• CPC Class Codes: H04L 29/12009 Arrangements for addressing and naming in data networks
• CPC Class Codes: H04L 61/00 Network arrangements or network protocols for addressing or naming
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 15/44 Augmented, consolidated or itemized billing statement or bill presentation
• CPC Class Codes: H04M 2215/0104 Augmented, consolidated or itemised billing statement, e.g. additional billing information, bill presentation, layout, format, e-mail, fax, printout, itemised bill per service or per account, cumulative billing, consolidated billing
• CPC Class Codes: H04M 2215/0176 Billing arrangements using internet
• CPC Class Codes: H04M 2215/2013 Fixed data network, e.g. PDN, ATM, B-ISDN
• CPC Class Codes: H04W 12/0608 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method and apparatus for allowing a user to access the internet from a remote location by using a local internet service provider with whom the user does not have an account. The user logs on to the local internet service provider'"'"'s system using an identifier that includes the user'"'"'s identification term and an identifier for the user'"'"'s home internet service provider server. A first server in the local internet service provider'"'"'s system determines that the login information includes the identifier for the user'"'"'s home internet service provider server and sends a query to a second server. The second server verifies that the user'"'"'s home internet service provider has an account with the local internet service provider and returns an internet protocol address for the home internet service provider'"'"'s server to the first server. The first server then seeks authorization from the home internet service provider'"'"'s server to provide internet access to the user over the local internet service provider'"'"'s system.

Claims

1. A method for authorizing access to the internet comprising:

receiving a login information packet at a first server from a user, the login information packet including user identification information that is used to identify the user and home server identification information that is used to determine an internet address for a second server that uses the user identification information to identify the user;

determining that the login information packet includes the home server identification information;

searching a first list stored on the first server for the home server identification information;

obtaining an internet address for the second server if the home server identification information is found on the first list;

establishing an internet connection between the first server and the second server using the internet address for the second server obtained from the first list;

searching a second list stored on the second server for the user identification information;

transmitting an authorization message from the second server to the first server if the user identification information satisfies certain predetermined criteria; and

granting the user access to the internet in response to the authorization message.

2. The method of claim 1 wherein the server identification information is separated from the user identification information by the @ symbol.

3. The method of claim 1 wherein the server identification information comprises a second level domain name separated from a first level domain name by a period.

4. A method for authorizing access to the internet comprising:

receiving a login information packet at a first server from a user, the login information packet including user identification information that is used to identify the user and server identification information that is used to determine an internet address for a second server that uses the user identification information to identify the user;

transmitting the server identification information from the first server to a third server;

searching a first list stored on the third server for the server identification information;

if the server identification information is found on the first list, transmitting the internet address for the second server from the third server to the first server, the internet address for the second server being obtained from the third server using the server identification information;

transmitting the user identification information from the first server to the second server over the internet using the internet address for the second server obtained from the third server;

searching a second list stored on the second server for the user identification information;

transmitting an authorization message from the second server to the first server over the internet if the user identification information is located on the second list and if the user satisfies certain predetermined criteria; and

granting the user access to the internet after the authorization message is received at the first server.

5. The method of claim 4 wherein the server identification information is separated from the user identification information by the @ symbol in the login information packet.

6. The method of claim 4 wherein the server identification information comprises a second level domain name separated from a first level domain name by a period.

7. The method of claim 4 wherein the step of searching the first list stored on the third server for the server identification information includes a comparison of the last character in the server identification information to the last character of an entry in the first list followed by a comparison of the second to last character in the server identification information to the second to last character of the entry in the first list.

8. The method of claim 4 wherein the first list comprises a configuration file that includes an identifier for the second server, a port for the second server and a type for the second server.

9. The method of claim 4 wherein the first list includes a configuration file that lists a shared key that is used by the second server to decrypt a user password sent to the second server.

10. The method of claim 8 wherein the identifier comprises the network ID for the second server.

11. A method for authorizing access to the internet comprising:

receiving a login information packet at a first server from a user, the login information packet including user identification information that is used to identify the user and server identification information that is used to determine an internet address for a second server that uses the user identification information to identify the user;

transmitting the server identification information from the first server to a third server;

searching a first list stored on the third server for the server identification information;

if the server identification information is not found on the first list, transmitting the server identification information to a fourth server;

searching a second list stored on the fourth server for the server identification information;

if the server identification information is found on the second list, transmitting the internet address for the second server from the fourth server to the first server, the internet address for the second server being obtained from the fourth server using the server identification information;

transmitting the user identification information from the first server to the second server over the internet using the internet address for the second server obtained from the fourth server;

searching a third list stored on the second server for the user identification information;

transmitting an authorization message from the second server to the first server over the internet if the user identification information is located on the third list and if the user satisfies certain predetermined criteria; and

granting the user access to the internet after the authorization message is received at the first server.

12. The method of claim 11 wherein the server identification information is separated from the user identification information by the @ symbol in the login information packet.

13. The method of claim 11 wherein the server identification information comprises a second level domain name separated from a first level domain name by a period.

14. The method of claim 11 wherein the step of searching the second list stored on the fourth server for the server identification information includes a comparison of the last character in the server identification information to the last character of an entry in the second list followed by a comparison of the second to last character in the server identification information to the second to last character of the entry in the second list.

15. The method of claim 11 wherein the second list comprises a configuration file that includes an identifier for the second server, a port for the second server and a type for the second server.

16. The method of claim 11 wherein the second list includes a configuration file that lists a shared key that is used by the second server to decrypt a user password sent to the second server.

17. The method of claim 15 wherein the identifier comprises a network ID for the second server.

18. An apparatus for authorizing access to the internet comprising:

a first server for receiving a login information packet from a user, the login information packet including user identification information that is used to identify the user and server identification information that is used to determine an internet address for a second server that uses the user identification information to identify the user;

a third server adapted to receive the server identification information from the first server;

software means running on the third server for verifying that the server identification information is listed in a table stored on the third server and for transmitting the internet address for the second server from the third server to the first server, the internet address for the second server being obtained from the table using the server identification information;

routing means for transmitting the user identification information from the first server to the second server over the internet using the internet address for the second server obtained from the table;

authentication means running on the second server for verifying that the user identification information satisfies certain predetermined criteria; and

authorization means for transmitting a message from the second server to the first server instructing that the user be granted access to the internet.