System and method for authorizing a portable communication device

• US 8,613,053 B2
• Filed: 10/11/2011
• Issued: 12/17/2013
• Est. Priority Date: 12/08/1998
• Status: Expired due to Fees

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Pagan, Florence C. I., Short, Joel E.
• Primary Examiner(s): DADA, BEEMNET W
• Application Number:
  US13/271,099
• Publication Number:
  US 20120030737A1
• Time in Patent Office: 798 Days
• Field of Search: 726/7, 726/26, 726/27, 726/4, 726/5, 726/8, 713/153, 713/154, 713/155, 713/168, 709/225, 709/226, 709/228
• US Class Current: 726/4
• CPC Class Codes: G06F 21/44 Program or device authentication

Abstract

Systems and methods of authorizing a portable communication device to access a network resource. In an embodiment, a request to access a network resource is received from a portable communication device via a network. A processor is used to dynamically and selectively determine whether the portable communication device is authorized to access the requested network resource. The determination may be based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information. If the portable communication device is authorized, it may be allowed to access the network resource. Otherwise, it may be redirected to an authentication system where it may be enabled to submit authentication-related information so that it may be authorized to access the requested network resource.

Claims

1. A method of authorizing a portable communication device to access a network resource, the method being performed at a network management system in communication with the portable communication device via a network, the method comprising:

receiving, from a portable communication device via a network, a request to access a network resource;

determining, on a processor, whether the portable communication device is authorized to access the requested network resource, the determination being based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

if the portable communication device is authorized, allowing the portable communication device to access the network resource; and

if the portable communication device is not authorized, redirecting the portable communication device to an authentication system where the portable communication device is configured to submit authentication-related information wherein the portable communication device can be authorized to access the requested network resource, wherein redirecting the portable communication device comprises sending transmission control protocol handshake completion data to the portable communication device in response to the request to access the network resource, the transmission control protocol handshake completion data configured to appear to be from the network resource, wherein the network management system need not communicate with the network resource if the portable communication device is not authorized.

2. The method of claim 1, wherein the portable communication device is one or more of a laptop, handheld device, personal digital assistant (PDAs) and cellphone.

3. The method of claim 1, wherein the network is located in or forms part of one or more of an airport, hotel and cellular telephone network.

4. The method of claim 1, wherein determining whether the portable communication device is authorized to access the requested network resource does not require additional software to be installed on the portable communication device prior to connection with the network.

5. The method of claim 1, wherein the unique identifying attribute associated with the portable communication device is determined from packets received from the portable communication device.

6. The method of claim 1, wherein the unique identifying attribute uniquely indicates the portable communication device used by the user.

7. The method of claim 6, wherein the unique identifying attribute is the media access control (MAC) address of the portable communication device used by the user.

8. The method of claim 1, further comprising using location information to determine whether the portable communication device is authorized to access the requested network resource.

9. The method of claim 1, further comprising storing information about the portable communication device such that subsequent attempts to access the network do not require the user to establish authorization.

10. The method of claim 1, wherein authorization further comprises determining whether the user of the portable communication device has paid for access and authorizing access if it is determined that the user has paid.

11. The method of claim 1, further comprising using the unique identifying attribute to access information stored in a user profile database.

12. The method of claim 1, wherein the processor is included in a gateway device.

15. The method of claim 1, wherein the authentication-related information is related to an agreement to access the network resource.

13. A computer implemented network management system configured to authorize a portable communication device to access a network resource, the system comprising:

a first network interface configured to receive, from a portable communication device via a network, a request to access a network resource;

a first software module that, when implemented on one or more processors, is configured to determine whether the portable communication device is authorized to access the requested network resource, the determination being based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

a second software module that, when implemented on one or more processors, is configured to allow the portable communication device to access the requested network resource if the portable communication device is authorized;

a third software module that, when implemented on one or more processors, is configured to redirect the portable communication device to an authentication system where the portable communication device is configured to submit authentication-related information wherein the portable communication device can be authorized to access the requested network resource if the portable communication device is not authorized, the third software module configured to redirect the portable communication device by sending connection handshake completion data to the portable communication device in response to the request to access the network resource, the connection handshake completion data configured to appear to be from the network resource, wherein the network management system need not communicate with the network resource if the portable communication device is not authorized; and

one or more processors configured to implement the first, second and third software modules.

16. The network management system of claim 13, wherein the authentication-related information is related to an agreement to access the network resource.

17. The network management system of claim 13, wherein the unique identifying attribute associated with the portable communication device is determined from packets received from the portable communication device.

18. The network management system of claim 13, further comprising a fourth software module that, when implemented on one or more processors, is configured to use location information to determine whether the portable communication device is authorized to access the requested network resource.

14. A computer implemented network management system configured to authorize a portable communication device to access a network resource, the system comprising:

a first network interface configured to receive, from a portable communication device via a network, a request to access a network resource; and

one or more processors configured to;

determine whether the portable communication device is authorized to access the requested network resource, the determination being based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

allow the portable communication device to access the requested network resource if the portable communication device is authorized; and

redirect the portable communication device to an authentication system where the portable communication device is configured to submit authentication-related information wherein the portable communication device can be authorized to access the requested network resource if the portable communication device is not authorized, by at least sending connection handshake completion data to the portable communication device in response to the request to access the network resource, the connection handshake completion data configured to appear to be from the network resource, wherein the network management system need not communicate with the network resource if the portable communication device is not authorized.

19. The network management system of claim 14, wherein the authentication-related information is related to an agreement to access the network resource.

20. The network management system of claim 14, wherein the unique identifying attribute associated with the portable communication device is determined from packets received from the portable communication device.