Methods and systems for providing security for accessing networks, methods and systems for providing security for accessing the internet

• US 7,149,896 B1
• Filed: 05/05/2000
• Issued: 12/12/2006
• Est. Priority Date: 05/05/2000
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bahl, Paramvir, Venkatachary, Srinivasan, Balachandran, Anand
• Primary Examiner(s): Louis-Jacques, Jacques
• Assistant Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US09/565,442
• Time in Patent Office: 2,412 Days
• Field of Search: 455/410, 455/411, 377/114.05, 713/166
• US Class Current: 713/166
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

Systems and methods for providing network access, e.g. Internet access, are described. An architecture includes a host organization network through which network access is provided. The host organization network can be advantageously deployed in public areas such as airports and shopping malls. An authentication/negotiation component is provided for authenticating various users and negotiating for services with service providers on behalf of the system users. The authentication/negotiation component can include one or more specialized servers and a policy manager that contains policies that govern user access to the Internet. An authentication database is provided and authenticates various users of the system. An access module is provided through which individual client computing devices can access the Internet. In one embodiment, the access module comprises individual wireless access points that permit the client computing devices to wirelessly communicate data packets that are intended for the Internet. In one aspect, users are given a variety of choices of different service levels that they can use for accessing the Internet. The service levels can vary in such things as bandwidth allocation and security measures. The various service levels can be purchased by the users using their computing devices.

Claims

1. A system for providing security for accessing the Internet, the system comprising:

a host network configured to provide access to the Internet;

an access module configured to establish a communication link with one or more mobile client computing devices from a public location; and

a server configured to establish a communication link between the access module and the host network, the server being configured to issue individual users of a mobile client computing device different keys that uniquely identify each user, the keys being configured for use with data packets that are transmitted from the client computing device to the access module, wherein the server is configured to provide multiple security options that provide different levels of security for a user, wherein one level of security is associated with a number of different encryption algorithms that can be selected for use to encrypt data packets that are sent from the mobile client computing device, wherein the number of different algorithms is selectable independent of any other security option.

2. The system of claim 1, wherein the server is configured to encrypt each of the different keys before issuing the keys to the individual users.

3. The system of claim 1, wherein at least some of the keys have different lengths.

4. The system of claim 1, wherein the server is configured to generate a key having one of a plurality of different lengths.

5. The system of claim 1, wherein the access module comprises multiple wireless access nodes that are configured to enable wireless communication links to be established between one or more of the mobile client computing devices and the access module.

6. The system of claim 1, wherein the multiple security options are offered by the server for a fee.

7. The system of claim 1, wherein the level of security is associated with the degree to which data packets that are sent from a mobile client computing device are encrypted.

8. The system of claim 7, wherein the degree to which the data packets can be encrypted ranges from full encryption to partial encryption.

9. The system of claim 7, wherein the degree to which the data packets can be encrypted ranges from full encryption to partial encryption, the partial encryption comprising encrypting only the header of a data packet.

10. A system for providing security for accessing the Internet comprising:

a host network configured to provide access to the Internet;

multiple wireless access points communicatively linked with the host network and configured to accommodate wireless communication with one or more client computing devices; and

a server configured to establish a communication link between the multiple wireless access points and the host network, the server being configured to offer multiple different levels of service for wireless selection and purchase by one or more users using a client computing device, the different levels of service providing multiple degrees of security that protect communication between the client computing devices and the server, wherein the multiple degrees of security are associated with the number of encryption algorithms that are available for selection by the server for use in encrypting communication that takes place between the client computing devices and the server, the server being further configured to allow a user to make a selection from among the different levels of service, and wherein the number of encryption algorithms is selectable by a user independently from other degrees of security.

11. The system of claim 10, wherein the multiple degrees of security are associated with multiple degrees to which data packets that are generated by a client computing device can be encrypted.

12. The system of claim 10, wherein the multiple degrees of security are associated with multiple degrees to which data packets that are generated by a client computing device can be encrypted, the degrees ranging from full encryption to partial encryption.

13. The system of claim 10, wherein the multiple degrees of security are associated with multiple degrees to which data packets that are generated by a client computing device can be encrypted, the degrees ranging from full encryption to partial encryption, partial encryption comprising encrypting only the header of the data packets.

14. The system of claim 10, wherein the multiple degrees of security are associated with multiple lengths of keys that are generated by the server and issued to a user.

15. The system of claim 14, wherein the server is configured to generate keys having a plurality of different lengths.

16. The system of claim 14, wherein the server is configured to generate a different key for each user.

17. The system of claim 10, wherein the server is configured to offer the different levels of service for different prices.

18. The system of claim 10, wherein the multiple wireless access points are located in a manner that at least some of them can be wirelessly accessed by a client computing device from a public location.

19. The system of claim 10, wherein at least some of the client computing devices are mobile computing devices.

20. A method for providing security for accessing the Internet comprising:

establishing a communication link between a client computing device and a server that is configured to enable the client computing device to access the Internet; and

offering for purchase via the communication link various levels of security that can be used to protect communication between the client computing device and the server, wherein indicia associated with said levels of security are presented to a user to allow the user to make a selection from among the levels of security, wherein one option associated with the levels of security enables a user to select the number of encryption algorithms that are available for selection by the server for use in encrypting communication that takes place between the client computing device and the server, the user selection of the number of algorithms occurring independently from the selection of any other security options.

21. The method of claim 20, wherein at least a portion of the communication link is wireless.

22. The method of claim 21 further comprising establishing the communication link from a public location.

23. The method of claim 21, wherein the client computing device comprises a mobile computing device.

24. The method of claim 21 further comprising establishing the communication link from a public location, the client computing device comprising a mobile computing device.

25. The method of claim 20, wherein the various levels of security comprise various degrees to which the communication between the client computing device and the server can be encrypted.

26. The method of claim 20, wherein the various levels of security comprise various lengths of keys that can be used to encrypt the communication.

27. The method of claim 26, wherein the key length is one of a plurality of different lengths.

28. The method of claim 26, wherein each user of a client computing device is issued a different key.

29. One or more computer-readable media having computer-readable instructions thereon which, when executed by one or more computers, cause the computers to:

establish a wireless communication link between a mobile client computing device and a server that is configured to enable the client computing device to access the Internet; and

offer for purchase via the wireless communication link various levels of security that can be used to protect communication between the client computing device and the server, wherein indicia associated with said levels of security are presented to a user to allow the user to make a selection from among the levels of security, wherein one option associated with the levels of security enables a user to select the number of encryption algorithms that are available for selection by the server for use in encrypting communication that takes place between the client computing device and the server, the user selection of the number of algorithms occurring independently from the selection of any other security options.

30. A method for providing security for accessing the Internet comprising:

establishing a wireless communication link with a mobile computing device;

issuing, via the wireless communication link, to a user of the mobile computing device, a unique key that is to be used by the user each time the user'"'"'s mobile computing device generates and sends a data packet intended for the Internet;

offering, to a user of the mobile computing device, multiple levels of security that can be used to protect communication associated with the client computing device, wherein one option associated with the levels of security enables a user to select, independent of the selection of any other security option, the number of encryption algorithms that are available for use in encrypting communication associated with the client computing device,

receiving data packets from the mobile computing device that are encrypted with the unique key and which are intended for transmission to the Internet; and

decrypting the encrypted data packets; and

sending the decrypted data packets to the Internet.

31. The method of claim 30, wherein the wireless communication link is established with a mobile computing device that is located in a public location.

32. The method of claim 30 further comprising encrypting the unique key prior to issuing it to the user.

33. The method of claim 30, wherein the keys can have one of a plurality of different lengths.

34. One or more computer-readable media having computer-readable instructions thereon which, when executed by one or more computers, implement the method of claim 30.

35. A method for providing security for accessing the Internet comprising:

defining a plurality of different security options that can be used to provide security for wireless Internet access; and

offering the security options at different prices for purchase by users who might wish to wirelessly access the Internet, wherein said offering comprises displaying indicia associated with said security options to allow a user to make a selection from among the security options, wherein the security options provide for varying levels of encryption of data packets that can be wirelessly sent from a computing device that is used by the user, said levels ranging from full encryption of the entire data packet to encryption of only a header of the data packet wherein portions other than the header are not encrypted;

wherein the plurality of different security options include an option that enables the user to select, independent of the selection of any other security option, a number of encryption algorithms that are available for use in providing security for the wireless Internet access.

36. The method of claim 35, wherein the users can purchase a security option to protect their wireless Internet access from a public location.

37. The method of claim 35, wherein the security options provide for varying levels of encryption.

38. The method of claim 35, wherein the security options provide for varying levels of encryption of data packets that can be wirelessly sent from a computing device that is used by the user, said levels ranging from full encryption to partial encryption.

39. The method of claim 35, wherein the security options provide for different length encryption keys.

40. The method of claim 35, wherein the security options provide for different length encryption keys, longer keys being more expensive than shorter keys.

41. The method of claim 35, wherein the security options offer a choice in the number of different encryption algorithms that can be used to encrypt data.

42. The method of claim 35, wherein the security options offer a choice in the number of different encryption algorithms that can be used to encrypt data and provide for different length keys.

43. One or more computer-readable media having computer-readable instructions thereon which, when executed by one or more computers, implement the method of claim 35.