Initiating a user session at an internet terminal using a smart card

• US 6,199,114 B1
• Filed: 11/09/1999
• Issued: 03/06/2001
• Est. Priority Date: 09/16/1997
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: WebTV Networks Inc. (Microsoft Corporation)
• Inventors: Matheny, John, Bonnaure, Patrick P., Perlman, Stephen G., White, Christopher M.
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US09/436,608
• Time in Patent Office: 483 Days
• Field of Search: 709/201, 709/203, 709/206, 709/208, 709/209, 709/212, 709/213, 709/217, 709/218, 709/219, 709/229
• US Class Current: 709/229
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

Initiating a user session at an internet terminal using a smart card is provided. An internet terminal is coupled to a server system. The internet terminal detects the presence of a smart card. The smart card includes a memory such as a programmable ROM (PROM), any form of erasable PROM (EPROM) or flash memory having stored therein identification information. The internet terminal reads a unique smart card identifier from the smart card and transmits the identifier a server. The server locates configuration information associated with a particular user of the server based upon the unique smart card identifier. The configuration information may include a defined customer environment or customer preferences for customizing the operation of the internet terminal such as the type of on-screen keyboard presented by the internet terminal, the font used by the internet terminal for displaying text, background music options, and e-mail options. After locating the configuration information, the server downloads the configuration information to the internet terminal. Thus, a user is able to initiate a user session from any internet terminal coupled to the server system and obtain access to the environment and preferences associated with the particular user.

Claims

1. In an internet terminal coupled with a server system, a method of initiating a user session with the server system from the internet terminal, the method comprising the acts of:

identifying the presence of a smart card in the internet terminal;

requesting initiation of a user session by reading identification information from a memory of the smart card and transmitting the identification information to the server system; and

receiving and storing, at the internet terminal, a ticket for use in accessing various services, the ticket having been generated in a process at the server system that includes;

the server system using the identification information to access a customer database maintained at the server system in order to find a customer record which includes at least a smart card identifier and a customer identifier, thereby determining that the identification information read from the smart card is associated with an authorized user of the server system; and

the server system generating the ticket, wherein the ticket includes information from the customer record.

2. The method of claim 1, further including the act of the internet terminal transmitting the ticket with a service request, in response to which the server system processes the service request with reference to the information stored within the ticket.

3. The method of claim 2, wherein the server system processing the service request comprises the server system retrieving a list of favorite web sites associated with the authorized user.

4. The method of claim 2, wherein the server system processing the service request comprises the server system retrieving a list of electronic mail based on an electronic mail identifier included in the information stored within the ticket.

5. The method of claim 1, wherein the ticket has been generated in a process at the server system that further includes:

the server system locating configuration information associated with the authorized user of the server system based on the identification information; and

the server system downloading the configuration information to the internet terminal.

6. The method of claim 5, wherein the configuration information includes information identifying one or more background music preferences.

7. The method of claim 5, wherein the configuration information includes information identifying one or more font preferences.

8. The method of claim 5, wherein the configuration information includes information identifying one or more on-screen keyboard preferences.

9. The method of claim 5, wherein the configuration information includes information identifying one or more electronic mail preferences.

10. The method of claim 1, wherein the internet terminal has a current state, and the method further includes the act of the internet terminal performing input processing based on the current state.

11. The method of claim 10, wherein the act of performing input processing based on the current state further includes the act of the internet terminal opening a connection with the server system if the current state of the internet terminal is disconnected.

12. The method of claim 10, wherein the act of performing input processing based on the current state further includes the act of the internet terminal powering itself up if the current state of the internet terminal is powered down.

13. The method of claim 10, wherein the act of performing input processing based on the current state further includes the act of the internet terminal waking up by suspending the screen-saver if the current state of the internet terminal is sleeping.

14. In a computer network that includes a plurality of servers logically connected in order to provide access to one or more internet sites, and a plurality of internet terminals connectable to one or more of the servers, a method of permitting a particular authorized user to log on to the computer network from any of the internet terminals independently of any internet terminal identifier associated with any internet terminal, the method comprising the acts of:

maintaining at one or more of the plurality of servers unique customer identifiers associated with authorized users of the computer network;

maintaining at said one or more servers unique smart card identifiers associated with a plurality of smart cards, each of the plurality of smart cards being associated with one of the authorized users of the computer network, the unique customer identifiers and the unique smart card identifiers being linked at said one or more servers;

receiving, at a particular server included in said one or more servers, the unique smart card identifier associated with one of the plurality of smart cards, the unique smart card identifier having been read from said one of the plurality of smart cards at a selected internet terminal into which said one of the plurality of smart cards has been inserted, said one of the plurality of smart cards being associated with a particular authorized user;

at the particular server, using the received unique smart card identifier to find the unique customer identifier associated with the particular authorized user in order to initiate a user session for the particular authorized user; and

establishing the user session without regard to any internet terminal identifier associated with the selected internet terminal.

15. The method of claim 14, further comprising, prior to the act of receiving the unique smart card identifier, the acts of:

the selected internet terminal reading the unique smart card identifier associated with said one of the plurality of smart cards from a semiconductor memory of said one of the plurality of smart cards; and

the selected internet terminal transmitting the smart card identifier associated with said one of the plurality of smart cards to the particular server.

16. The method of claim 14 further comprising the acts of:

at the particular server, using the unique smart card identifier to locate configuration information associated with the particular authorized user; and

downloading the configuration information from the particular server to the selected internet terminal.

17. The method of claim 16, wherein the configuration information tailors one or more operations of the selected internet terminal to the particular user.

18. The method of claim 16, wherein the configuration information includes information identifying one or more background music preferences.

19. The method of claim 16, wherein the configuration information includes information identifying one or more font preferences.

20. The method of claim 16, wherein the configuration information includes information identifying one or more on-screen keyboard preferences.

21. The method of claim 16, wherein the configuration information includes information identifying one or more electronic mail preferences.

22. The method of claim 14, further comprising the acts of:

locating at said particular server account information for the particular authorized user; and

thereafter

responding to subsequent service requests from the selected internet terminal in a manner determined by an environment associated with the account information.

23. The method of claim 22, wherein the environment includes a set of favorite web sites, and the act of responding to subsequent service requests further includes the acts of:

the selected internet terminal making a request for favorite web sites; and

responsive to the request, one of the plurality of servers transmitting the set of favorite web sites.

24. The method of claim 22, wherein the environment includes a set of electronic mail addresses.

25. The method of claim 24, further comprising the acts of:

the selected internet terminal making a request to compose an electronic mail message; and

responsive to the request, one of the plurality of servers transmitting information representing the set of electronic mail addresses.

26. The method of claim 22, wherein the environment includes an electronic mail identifier by which electronic mail can be received from the Internet.

27. The method of claim 26, wherein the environment includes a set of electronic mail messages addressed to the electronic mail identifier.

28. A computer program product for implementing, in an internet terminal coupled with a server system, a method of initiating a user session with the server system from the internet terminal, the computer program product comprising:

a computer-readable medium carrying executable instructions that, when executed, are capable of performing the acts of;

identifying the presence of a smart card in the internet terminal;

requesting initiation of a user session by reading identification information from a memory of the smart card and transmitting the identification information to the server system; and

receiving and storing, at the internet terminal, a ticket for use in accessing various services, the ticket having been generated in a process at the server system that includes;

the server system using the identification information to access a customer database maintained at the server system in order to find a customer record which includes at least a smart card identifier and a customer identifier, thereby determining that the identification information read from the smart card is associated with an authorized user of the server system; and

the server system generating the ticket, wherein the ticket includes information from the customer record.

29. The computer program product of claim 28, wherein the executable instructions, when executed, are further capable of performing the act of initiating transmission of the ticket to the server system with a service request.

30. The computer program product of claim 28, wherein the executable instructions, when executed, are further capable of performing the act of receiving configuration information associated with the authorized user of the server system, the configuration information having been generated in a process at the server system that includes:

the server system using the identification information to access a customer database maintained at the server system in order to locate the configuration information associated with the authorized user; and

the server system downloading the configuration information to the internet terminal.

31. A computer program product for implementing, in a server included in a computer network, the server being logically connected to an internet terminal and providing the internet terminal with access to one or more internet sites, a method of permitting a particular authorized user to log on to the computer network from the internet terminal independently of any internet terminal identifier associated with the internet terminal, the computer program product comprising:

a computer-readable medium carrying executable instructions that, when executed, are capable of performing the acts of;

storing unique customer identifiers associated with authorized users of the computer network;

storing unique smart card identifiers associated with a plurality of smart cards, each of the plurality of smart cards being associated with one of the authorized users of the computer network, the unique customer identifiers and the unique smart card identifiers being linked at the server;

receiving the unique smart card identifier associated with one of the plurality of smart cards, said one of the plurality of smart cards having been inserted into the internet terminal and the unique smart card identifier associated with said one of the plurality of smart cards having been read at the internet terminal, said one of the plurality of smart cards being associated with a particular authorized user;

using the received unique smart card identifier to find the unique customer identifier associated with the particular authorized user in order to initiate a user session for the particular authorized user; and

establishing the user session without regard to any internet terminal identifier associated with the internet terminal.

32. The computer program product of claim 31, wherein the act of using the received unique smart card identifier to find the unique customer identifier associated with the particular user comprises the acts of:

locating configuration information associated with the particular user based on the unique smart card identifier associated with said one of the plurality of smart cards; and

downloading the configuration information to the internet terminal.

33. The computer program product of claim 31, wherein the act of using the received unique smart card identifier to find the unique customer identifier comprises the acts of:

using the received smart card identifier to access a customer database maintained at the server in order to find a customer record which includes the unique smart card identifier associated with said one of the plurality of smart cards and the unique customer identifier associated with the particular authorized user, thereby determining that the received smart card identifier is associated with an authorized user of the computer network;

generating a ticket for use in accessing various services, wherein the ticket includes information from the customer record; and

transmitting the ticket to the internet terminal.