Methods and systems for accessing networks, methods and systems for accessing the internet

• US 7,032,241 B1
• Filed: 05/05/2000
• Issued: 04/18/2006
• Est. Priority Date: 02/22/2000
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bahl, Paramvir, Venkatachary, Srinivasan, Balachandran, Anand
• Primary Examiner(s): Jung, David
• Assistant Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US09/565,558
• Time in Patent Office: 2,174 Days
• Field of Search: 455/410, 455/411, 379/114.05
• US Class Current: 726/4
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

Systems and methods for providing network access, e.g. Internet access, are described. An architecture includes a host organization network through which network access is provided. The host organization network can be advantageously deployed in public areas such as airports and shopping malls. An authentication/negotiation component is provided for authenticating various users and negotiating for services with service providers on behalf of the system users. The authentication/negotiation component can include one or more specialized servers and a policy manager that contains policies that govern user access to the Internet. An authentication database is provided and authenticates various users of the system. An access module is provided through which individual client computing devices can access the Internet. In one embodiment, the access module comprises individual wireless access points that permit the client computing devices to wirelessly communicate data packets that are intended for the Internet. In one aspect, users are given a variety of choices of different service levels that they can use for accessing the Internet. The service levels can vary in such things as bandwidth allocation and security measures. The various service levels can be purchased by the users using their computing devices.

Claims

1. A system for providing access to a network, the system comprising:

a host network configured to access the network;

at least one authentication/negotiation component communicatively linked with the host network and configured to authenticate individual network users and negotiate various services on behalf of the individual network users based on which, if any, of a plurality of organizations to which each said individual network user belongs; and

at least one access module communicatively linked with the one authentication/negotiation component and configured to enable a user to access the host network.

2. The system of claim 1, wherein the one authentication/negotiation component and the one access module are hard wired for communication.

3. The system of claim 1, wherein the one authentication/negotiation component and the one access module are configured for wireless communication.

4. The system of claim 1, wherein the one authentication/negotiation component is configured to authenticate individual network users while not being privy to user authentication information.

5. The system of claim 1 further comprising at least one authentication database that contains user information which is used to authenticate users.

6. The system of claim 5, wherein the one authentication database comprises a globally accessible database, the one authentication/negotiation component being configured to enable users to be authenticated by the globally accessible database while not being privy to user authentication information.

7. The system of claim 5, wherein the one authentication database comprises a local authentication database that is local to the host network.

8. The system of claim 1 further comprising one or more clients that are configured to communicate with the one access module.

9. The system of claim 8, wherein the one or more clients are configured to wirelessly communicate with the one access module.

10. The system of claim 8, wherein the one or more clients are hardwired to communicate with the one access module.

11. The system of claim 8, wherein at least some of the clients are mobile.

12. The system of claim 8, wherein at least some of the clients are mobile and configured to wirelessly communicate with the one access module.

13. The system of claim 1 further comprising one or more resources that are associated with the host network, at least some of the resources being configured for use by individual network users.

14. The system of claim 1, wherein the one access module comprises at least one access point through which wireless communication takes place.

15. The system of claim 1, wherein the one access module comprises a plurality of access points that collectively define a wireless subnet.

16. The system of claim 1, wherein the host network is located in a public area and is generally accessible by members of the public.

17. The system of claim 1, wherein the host network is configured to access a network comprising the Internet, the system further comprising a plurality of Internet Service Providers (ISPs) that provide Internet access for the host network, the authentication/negotiation component being configured to negotiate Internet access with one or more of the ISPs on behalf of individual network users.

18. A system for providing access to the Internet, the system comprising:

at least one host organization network configured to access the Internet, the host organization network comprising one or more subnets each of which comprising;

at least one server configured to receive data packets from individual client computing devices and transmit the data packets to the Internet;

at least one policy manager configured to provide one or more policies that govern user interaction with the Internet, wherein at least one said policy is based on which, if any, of a plurality of organizations to which the user belongs; and

a plurality of public access points each of which configured to receive wireless communication from a user that is using a client computing device to wirelessly transmit data packets that are intended for the Internet and provide the wirelessly transmitted data packets to the one server before the data packets are transmitted to the Internet.

19. The system of claim 18, wherein at least one of the client computing devices comprises a mobile computing device.

20. The system of claim 18, wherein the public access points are arranged to define a wireless subnet.

21. The system of claim 18 further comprising a global authentication database that contains user information that is used to authenticate users so that they can use the host organization network to access the Internet.

22. The system of claim 21, wherein the one server is configured to establish a link between a client computing device and the global authentication database, the link providing secure end-to-end communication between the client computing device and the global authentication database.

23. The system of claim 21, wherein the client computing device communicates directly with the global authentication database for authentication.

24. The system of claim 21, wherein the client computing device communicates directly with the global authentication database for authentication, and the global authentication database is configured to notify the one server when a user is authenticated.

25. The system of claim 21, wherein the global authentication database is configured to provide certain user information to the one server once the user is authenticated.

26. The system of claim 25, wherein the certain information comprises billing information.

27. The system of claim 18 further comprising a local authentication database that contains user information that is used to authenticate users so that they can use the host organization network to access the Internet.

28. The system of claim 18 further comprising a plurality of resources associated with the one host organization network and which can be used by one or more users.

29. The system of claim 18, wherein the one server is configured to negotiate for at least one service that can be consumed by a user, the server negotiating on behalf of the user with at least one entity that provides the service.

30. The system of claim 29, wherein said at least one entity comprises an Internet Service Provider (ISP) and the one server negotiates for Internet access.

31. The system of claim 29, wherein said at least one entity comprises an Internet Service Provider (ISP) and the one server negotiates for Internet access speed.

32. The system of claim 29, wherein said at least one entity comprises a plurality of Internet Service Providers (ISPs), and the one server negotiates for the one service from a selection various services that are offered by the ISPs at various prices.

33. The system of claim 18, wherein the access points are configured to wirelessly communicate with the one server.

34. A system for providing access to the Internet, the system comprising:

multiple wireless nodes through which the Internet can be accessed;

multiple access points with which the wireless nodes can communicate;

a server configured to receive wireless communication from the multiple access points, the server configured to;

enable authentication of various users;

negotiate for services from one or more service providers for each said user based on which, if any, of a plurality of organizations to which the user belongs; and

route data packets to and from the Internet on behalf of the users; and

at least one authentication database that contains user information that can be used to authenticate the users.

35. The system of claim 34, wherein the wireless nodes comprise mobile computing devices that are used by a user to access the Internet.

36. The system of claim 34, wherein the access points are arranged to define at least one wireless subnet.

37. The system of claim 34, wherein the user is authenticated by the one authentication database in a secure end-to-end fashion.

38. The system of claim 34, wherein the user is authenticated by the one authentication database in a secure end-to-end fashion, all data packets after authentication being routed through the server.

39. The system of claim 34, wherein the service providers comprise Internet Service Providers (ISPs).

40. The system of claim 34 further comprising multiple different resources that can be accessed through the server and used by the users.

41. The system of claim 34, wherein the multiple access points are publicly accessible.

42. The system of claim 34 further comprising a policy manager that provides various policies that govern the use of the system by a user.

43. The system of claim 42, wherein the policies relate to access speed.

44. The system of claim 42, wherein the policies relate to security measures.

45. The system of claim 42, wherein the policies relate to service levels.

46. The system of claim 42, wherein the policies relate to the use of system resources.

47. A method of providing Internet access comprising:

establishing a communication link with a mobile computing unit;

using the communication link to authenticate a user of the mobile computing unit, the user being unaffiliated with any particular Internet Service Providers (ISPs);

negotiating Internet access from one or more service providers for the user based on which, if any, of a plurality of organizations to which the user belongs; and

using the communication link to provide Internet access to the user of the mobile computing unit.

48. The method of claim 47, wherein the authentication takes place by using a globally accessible authentication database.

49. The method of claim 47, wherein the communication link comprises a wireless communication link.

50. The method of claim 47, wherein the communication link comprises a wireless communication link between the mobile computing unit and a wireless access point that is located in a public area.

51. The method of claim 50, wherein the communication link further comprises a wireless communication link between the wireless access point and a server that is configured to provide the Internet access.

52. The method of claim 51, wherein the server is configured to handle data packets that are intended for the Internet before they are routed to the Internet.

53. The method of claim 47 further comprising after authenticating the user, issuing a token to the user that is unique to the user, the token being configured for use each time the user provides a data packet that is intended for the Internet.

54. One or more computer-readable media having computer-readable instructions thereon which, when executed by one or more computers, cause the computers to:

establish a wireless communication link between a mobile computing unit and a publicly accessible access point;

use the communication link to authenticate a user of the mobile computing unit, the user being unaffiliated with any particular Internet Service Providers (ISPs);

use the communication link to negotiate for Internet access from one or more said ISPs for the user based on which, if any, of a plurality of organizations to which the user belongs; and

use the communication link to provide Internet access to the user of the mobile computing unit.

55. The computer-readable media of claim 54, wherein the instructions cause the computers to authenticate the user through a globally accessible authentication database.

56. A system for providing access to a network, the system comprising:

a host network configured to access the network;

at least one authentication/negotiation component communicatively linked with the host network and configured to authenticate individual network users and negotiate various services on behalf of the individual network users based on which, if any, of a plurality of organizations to which each said individual network user belongs;

at least one access module communicatively linked with the one authentication/negotiation component and configured to enable a user to access the host network; and

a policy manager that provides various policies that govern the use of the system by a user.

57. The system of claim 56, wherein the policies relate to service levels.

58. The system of claim 56, wherein the one authentication/negotiation component is configured to authenticate individual network users while not being privy to user authentication information.

59. A system for providing access to a network, the system comprising:

a host network configured to access the network, wherein the host network is configured to access a network comprising the Internet;

at least one authentication/negotiation component communicatively linked with the host network and configured to authenticate individual network users and negotiate various services on behalf of the individual network users based on which, if any, of a plurality of organizations to which each said individual network user belongs;

at least one access module communicatively linked with the one authentication/negotiation component and configured to enable a user to access the host network;

a policy manager that provides various policies that govern the use of the system by a user; and

the system being configured to provide Internet access for the host network via a plurality of Internet Service Providers (ISPs), the authentication/negotiation component being configured to negotiate Internet access with one or more of the ISPs on behalf of individual network users.

60. The system of claim 59, wherein the policies relate to service levels.

61. The system of claim 59, wherein the one authentication/negotiation component is configured to authenticate individual network users while not being privy to user authentication information.