System and method for providing access to a network in a communications environment

• US 7,296,152 B1
• Filed: 07/09/2002
• Issued: 11/13/2007
• Est. Priority Date: 07/09/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Tan, Godfrey, Sealey, Robert R., MacPherson, Matthew S.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): LEMMA, SAMSON B
• Application Number:
  US10/192,244
• Time in Patent Office: 1,953 Days
• Field of Search: 713/176, 713/168, 726/3, 726/2, 726/20
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for authenticating an end user in a network environment is provided that includes positioning an identification element in a first device that is operable to provide an interface for an end user. The first device is further operable to communicate with an internet protocol (IP) network and with a second device. The end user is then authenticated with a selected one of the first and second devices through the IP network using the identification element such that the end user may operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user. Each of the access networks is operable to facilitate communications between the end user and the IP network.

Claims

1. A method for authenticating an end user in a network environment comprising:

positioning an identification element in a first device that is configured to provide an interface for an end user, wherein the first device is further configured to communicate with an internet protocol (IP) network and with a second device whereby the first and second devices achieve synchronization with each other, and whereby data propagate between the first and second devices;

authenticating the end user with a selected one of the first and second devices through the IP network using the identification element such that the end user operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user, each of the access networks operable to facilitate communications between the end user and the IP network; and

configuring each of the first and second devices to designate a preference for a selected one of the access networks, wherein the preference is invoked as a default for the end user unless another one of the access networks is selected by the end user.

2. The method claim 1, further comprising:

implementing a communications protocol in each of the first and second devices such that they can communicate with each other; and

communicating, by the first device, to the second device such that the second device is authenticated through the IP network using the identification element.

3. The method of claim 2, wherein the communication by the first device to the second device is executed automatically in response to the second device being positioned in a local area shared by the first and second devices.

4. The method of claim 2, wherein the communications protocol implemented in the first and second devices is secure such that data intended for the end user is received by a selected one of the devices.

5. The method of claim 2, further comprising:

communicating, by the second device, to a selected one of the first device and the end user that the second device is capable of displaying data being received by the first device in an enhanced format.

6. The method of claim 1, further comprising:

invoking an authentication, authorization, and accounting (AAA) server in order to authenticate the end user.

7. The method of claim 1, wherein the identification element is a subscriber identification module (SIM), and wherein the access network that provides connectivity to the end user is selected from the group consisting of an Ethernet network;

a wireless local area network (WLAN); and

a general packet radio service (GPRS) network.

8. A system for authenticating an end user in a network environment comprising:

means for positioning an identification element in a first device that is configured to provide an interface for an end user, wherein the first device is further configured to communicate with an internet protocol (IP) network and with a second device, whereby the first and second devices achieve synchronization with each other, and whereby data propagate between the first and second devices;

means for authenticating the end user with a selected one of the first and second devices through the IP network using the identification element such that the end user operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user, each of the access networks operable to facilitate communications between the end user and the IP network; and

means for configuring each of the first and second devices to designate a preference for a selected one of the access networks, wherein the preference is invoked as a default for the end user unless another one of the access networks is selected by the end user.

9. The system claim 8, further comprising:

means for implementing a communications protocol in each of the first and second devices such that they can communicate with each other; and

means for communicating to the second device such that the second device is authenticated through the IP network using the identification element.

10. The system of claim 9, wherein the communication to the second device is executed automatically in response to the second device being positioned in a local area shared by the first and second devices.

11. The system of claim 9, wherein the communications protocol implemented in the first and second devices is secure such that data intended for the end user is received by a selected one of the devices.

12. The system of claim 9, further comprising:

means for communicating to a selected one of the first device and the end user that the second device is capable of displaying data being received by the first device in an enhanced format.

13. The system of claim 8, further comprising:

means for invoking an authentication, authorization, and accounting (AAA) server in order to authenticate the end user.

14. The system of claim 8, wherein the identification element is a subscriber identification module (SIM), and wherein the access network that provides connectivity to the end user is selected from the group consisting of an Ethernet network;

a wireless local area network (WLAN); and

a general packet radio service (GPRS) network.

15. A computer readable medium having code for authenticating an end user in a network environment, the code configured to:

position an identification element in a first device that is configured to provide an interface for an end user, wherein the first device is further configured to communicate with an internet protocol (IP) network and with a second device whereby the first and second devices achieve synchronization with each other and whereby data propagate between the first and second devices;

authenticate the end user with a selected one of the first and second devices through the IP network using the identification element such that the end user operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user, each of the access networks operable to facilitate communications between the end user and the IP network; and

configure each of the first and second devices to designate a preference for a selected one of the access networks, wherein the preference is invoked as a default for the end user unless another one of the access networks is selected by the end user.

16. The code of claim 15, further operable to:

implement a communications protocol in each of the first and second devices such that they can communicate with each other; and

communicate to the second device such that the second device is authenticated through the IP network using the identification element.

17. The code of claim 16, wherein the communication to the second device is executed automatically in response to the second device being positioned in a local area shared by the first and second devices.

18. The code of claim 16, wherein the communications protocol implemented in the first and second devices is secure such that data intended for the end user is received by a selected one of the devices.

19. The code of claim 16, further operable to:

communicate to a selected one of the first device and the end user that the second device is capable of displaying data being received by the first device in an enhanced format.

20. The code of claim 15, further operable to:

invoke an authentication, authorization, and accounting (AAA) server in order to authenticate the end user.

21. The code of claim 15, wherein the identification element is a subscriber identification module (SIM), and wherein the access network that provides connectivity to the end user is selected from the group consisting of an Ethernet network;

a wireless local area network (WLAN); and

a general packet radio service (GPRS) network.

22. An apparatus for authenticating an end user in a network environment comprising:

a first device having an identification element, the first device being configured to provide an interface for an end user, the first device being further configured to communicate with an internet protocol (IP) network and with a second device, whereby the first and second devices achieve synchronization with each other, and whereby data propagate between the first and second devices, wherein the end user may be authenticated with a selected one of the first and second devices through the IP network using the identification element such that the end user operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user, each of the access networks operable to facilitate communications between the end user and the IP network, wherein each of the first and second devices may be configured to designate a preference for a selected one of the access networks, and wherein the preference is invoked as a default for the end user unless another one of the access networks is selected by the end user.

23. The apparatus of claim 22, further comprising:

a communications protocol wherein the first device is operable to implement such that the first device can communicate with the second device, wherein the first device may communicate with the second device such that the second device is authenticated through the IP network using the identification element.

24. The apparatus of claim 23, wherein the communication by the first device to the second device is executed automatically in response to the second device being positioned in a local area shared by the first and second devices.

25. The apparatus of claim 23, wherein the communications protocol implemented in the first and second devices is secure such that data intended for the end user is received by a selected one of the devices.

26. The apparatus of claim 23, wherein the first device is operable to receive a signal from the second device that indicates that the second device is capable of displaying data being received by the first device in an enhanced format.

27. The apparatus of claim 22, further comprising:

an authentication, authorization, and accounting (AAA) server operable to be accessed by the first device in order to authenticate the end user.

28. The apparatus of claim 22, wherein the identification element is a subscriber identification module (SIM), and wherein the access network that provides connectivity to the end user is selected from the group consisting of an Ethernet network;

a wireless local area network (WLAN); and

a general packet radio service (GPRS) network.