US5721780A
Expired / Lapsed
US
⏱️ 0.0 years remaining
User-transparent security method and apparatus for authenticating user terminal access to a network
Assignee: Nokia of America Corp
•
Filing: 1995-05-31
•
Granted: 1998-02-24
•
Expires: 2015-05-31
Abstract
Abstract The present invention provides a password authentication security system for a telecommunications network having a plurality of user terminals or subscriber stations communicably coupled to the network. The system comprises a network control center coupled to the subscriber stations, to service provider stations and to network databases via the network. Upon establishment of a communication with a subscriber station, a network coupling identifier comprising in one embodiment the telephone number of the line to which the subscriber station is connected is detected at a telephone switching office and transmitted to the control center. If this is the first time communications have been established between the subscriber station and the network, the received telephone number is encrypted to produce a secret password that is then automatically transmitted to the subscriber station for storage in memory. Upon subsequent communications, the telephone number is again received by the control center where it is encrypted to produce a second password. The first password is then automatically retrieved from memory of the subscriber station independent of user interaction. The two passwords are compared, and the network control center causes the incoming call of the selected user terminal to be connected to a network service provider station, a network database, a network output device or the like if the passwords are at least similar. If the two passwords are not at least similar, the control center causes the incoming call of the selected user terminal to be disconnected, thereby terminating the user terminal's access to the network.
Inventors
- 👤 Myra L. Ensor
- 👤 Thaddeus Julius Kowalski
- 👤 Agesino Primatic
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 10:07
CPC Classifications
H; H04; H04Q; H04Q3/00; H04Q3/0016; H04Q3/0029; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/335; H04L; H04L63/00; H04L63/08; H04L63/083; H04L9/00; H04L9/40; H04Q2213/00; H04Q2213/13515
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
226 words
A method for determining whether access to a network from a selected one of a plurality of user terminals in communication through the network is authorized, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, the method comprising the steps of: detecting the identifier of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier containing information of the user terminal's coupling to the network; retrieving from the user terminal a password; comparing the identifier and the password; allowing access to the network for the selected user terminal if a first predetermined portion of the identifier and a second predetermined portion of the password satisfy a predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password; and denying access to the network for the selected user terminal if the first predetermined portion of the identifier and the second predetermined portion of the password do not satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password, wherein the detecting, retrieving and comparing steps are automatically performed independent of and transparent to the user by a network control center in communication with the network.
Claim 2
Independent Claim
226 words
A method for determining whether access to a network from a selected one of a plurality of user terminals in communication through the network is authorized, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, the method comprising the steps of: detecting the identifier of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier containing information of the user terminal's coupling to the network; retrieving from the user terminal a password; comparing the identifier and the password; allowing access to the network for the selected user terminal if a first predetermined portion of the identifier and a second predetermined portion of the password satisfy a predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password; and denying access to the network for the selected user terminal if the first predetermined portion of the identifier and the second predetermined portion of the password do not satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password, wherein the detecting, retrieving and comparing steps are automatically performed independent of and transparent to the user by a network control center in communication with the network.
Claim 3
Dependent Claim
61 words
The method of claim 1, wherein the network comprises a telecommunications network selected from the group consisting of a wired network, a wireless network, a satellite network, a fiber optic cable network and a coaxial cable network and the step of detecting the identifier comprises the step of detecting the communications channel of an incoming call from the selected user terminal.
Claim 4
Dependent Claim
36 words
The method of claim 1, wherein the network comprises a telephone network and the step of detecting the identifier comprises the step of detecting the telephone number of an incoming call from the selected user terminal.
Claim 5
Dependent Claim
44 words
The method of claim 3, wherein the step of detecting the telephone number of an incoming call from the selected user terminal comprises the step of receiving the incoming call's telephone number from an automatic number identification unit of a telephone network switching office.
Claim 6
Dependent Claim
134 words
The method of claim 3, wherein the steps of allowing access to the network and denying access to the network comprise the steps of: coupling the incoming call of the selected user terminal to one of a network service, a network database and a network output device if the first predetermined portion of the identifier and the second predetermined portion of the password satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password; and disconnecting the incoming call of the selected user terminal from the network if the first predetermined portion of the identifier and the second predetermined portion of the password do not satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password.
Claim 7
Dependent Claim
69 words
The method of claim 1, wherein the network comprises a computer network and the step of detecting the identifier comprises the step of detecting the network address of one of a server managing a local network to which the user terminal is connected, a remote link through which the user terminal is coupled to the network and a home directory of the network or a sub-network of the network.
Claim 8
Dependent Claim
87 words
The method of claim 1, wherein the network comprises a telecommunications network further in communication with at least one service provider station for downloading software and service information from the station to user terminals, with the network selected from the group consisting of a wired network, a wireless network, a satellite network, a fiber optic cable network and a coaxial cable network, and wherein the step of detecting the identifier comprises the step of detecting the telephone number of an incoming call from the selected user terminal.
Claim 9
Dependent Claim
34 words
The method of claim 1, wherein the step of retrieving from the user terminal a password comprises the step of reading from memory provided in the user terminal a password previously stored in memory.
Claim 10
Dependent Claim
60 words
The method of claim 1, wherein the step of comparing the identifier and the password further comprises the step selected from the group of steps consisting of: encrypting the identifier to produce an encrypted password for comparison with the password received from the user terminal, and decrypting the password to produce a decrypted identifier for comparison with the detected identifier.
Claim 11
Dependent Claim
146 words
The method of claim 1, wherein the steps of allowing access to the network for the selected user terminal if the first predetermined portion of the identifier and the second predetermined portion of the password satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password, and denying access to the network for the selected user terminal if the first predetermined portion of the identifier and the second predetermined portion of the password do not satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password comprise the steps of: allowing access to the network for the selected user terminal if the identifier and the password are identical; and denying access to the network for the selected user terminal if the identifier and the password are not identical.
Claim 12
Dependent Claim
86 words
The method of claim 1, wherein upon establishment of a first communication between the network and the user terminal, the method further comprises the steps of: detecting the identifier of the selected user terminal upon establishment of the first communication between the network and the user terminal, the identifier containing information of the user terminal's coupling to the network; encrypting the identifier to generate a secret password; and transmitting the password to the user terminal via the network for storage in memory of the user terminal.
Claim 13
Dependent Claim
132 words
In a security system for authenticating access to a network from a selected one of a plurality of user terminals in communication through the network, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, a method is provided for selecting and passing to the selected user terminal a password used to obtain access to the network, the method comprising the steps of: detecting the identifier of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier containing unique information of the user terminal's coupling to the network; encrypting the identifier to generate a secret password; and transmitting the password to the user terminal via the network.
Claim 14
Dependent Claim
132 words
In a security system for authenticating access to a network from a selected one of a plurality of user terminals in communication through the network, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, a method is provided for selecting and passing to the selected user terminal a password used to obtain access to the network, the method comprising the steps of: detecting the identifier of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier containing unique information of the user terminal's coupling to the network; encrypting the identifier to generate a secret password; and transmitting the password to the user terminal via the network.
Claim 15
Dependent Claim
35 words
The method of claim 12, wherein the detecting, encrypting and transmitting steps of the method are automatically performed independent of and transparent to the user by a network control center in communication with the network.
Claim 16
Dependent Claim
61 words
The method of claim 12, wherein the network comprises a telecommunications network selected from the group consisting of a wired network, a wireless network, a satellite network, a fiber optic cable network and a coaxial cable network and the step of detecting the identifier comprises the step of detecting the communications channel of an incoming call from the selected user terminal.
Claim 17
Dependent Claim
35 words
The method of claim 12, wherein the network comprises telephone network and the step of detecting the identifier comprises the step of detecting the telephone number of an incoming call from the selected user terminal.
Claim 18
Dependent Claim
43 words
The method of claim 15, wherein the step of detecting the telephone number of an incoming call from the selected user terminal comprises the step determining the incoming call's telephone number from an automatic number identification unit of a telephone network switching office.
Claim 19
Dependent Claim
36 words
The method of claim 12, wherein the network comprises a computer network and the step of detecting the identifier comprises the step of detecting the network address of the users terminal's coupling to the computer network.
Claim 20
Dependent Claim
86 words
The method of claim 12, wherein the network comprises a telecommunications network further in communication with at least one service provider station for downloading software and services from the station to user terminals, with the network selected from the group consisting of a wired network, a wireless network, a satellite network, a fiber optic cable network and a coaxial cable network, and wherein the step of detecting the identifier comprises the step of detecting the telephone number of an incoming call from the selected user terminal.
Claim 21
Dependent Claim
32 words
The method of claim 12, wherein the step of transmitting the password to the user terminal via the network comprises the step of storing the password in memory of the user terminal.
Claim 22
Dependent Claim
128 words
The method of claim 12, wherein the step of transmitting the password to the user terminal via the network comprises the step of storing the password in memory of the user terminal, and wherein upon a selected subsequent establishment of a communication between the network and the user terminal, the method further comprises the steps of: detecting the identifier of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier containing information of the user terminal's coupling to the network; encrypting the identifier to generate a second secret password different form the first secret password; and transmitting the second password to the user terminal via the network to replace the first secret password stored in memory of the user terminal.
Claim 23
Dependent Claim
177 words
In a security system for a telecommunications network having a plurality of user terminals in communication through the network, an apparatus is provided for authenticating access to the network from a selected one of the plurality of user terminals having memory, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, the apparatus comprising: a network control center in communication with the network for receiving the identifier from memory of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier comprising one of a communications channel indicator, a network address and a telephone number of an incoming communication from the selected user terminal, the network control center comprising comparison logic for comparing the identifier with a password read from a predetermined location in memory of the selected user terminal, and a switch for allowing or denying access to the network for the selected user terminal based upon the result of the comparison.
Claim 24
Dependent Claim
177 words
In a security system for a telecommunications network having a plurality of user terminals in communication through the network, an apparatus is provided for authenticating access to the network from a selected one of the plurality of user terminals having memory, each of the plurality of user terminals having an identifier for distinguishing one of the user terminals from the remainder of the user terminals within the network, the apparatus comprising: a network control center in communication with the network for receiving the identifier from memory of the selected user terminal upon establishment of a communication between the network and the user terminal, the identifier comprising one of a communications channel indicator, a network address and a telephone number of an incoming communication from the selected user terminal, the network control center comprising comparison logic for comparing the identifier with a password read from a predetermined location in memory of the selected user terminal, and a switch for allowing or denying access to the network for the selected user terminal based upon the result of the comparison.
Claim 25
Dependent Claim
41 words
The apparatus of claim 21, wherein the network control center automatically receives the identifier from the user terminal and the comparison logic automatically compares the identifier with the password upon establishment of the communication independent of and transparent to the user.
Claim 26
Dependent Claim
63 words
The apparatus of claim 21, wherein the telecommunications network comprises one of a wired network, a wireless network, a satellite network, a fiber optic cable network and a coaxial cable network, and the apparatus further comprises a switching office of the telecommunications network having an automatic number identification unit for detecting the telephone number of an incoming communication from the selected user terminal.
Claim 27
Dependent Claim
129 words
The apparatus of claim 23, wherein the network control center causes the incoming call of the selected user terminal to be connected to one of a network service provider station, a network database and a network output device if a first predetermined portion of the identifier and a second predetermined portion of the password satisfy a predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password, and further causes the incoming call of the selected user terminal to be disconnected from the network if the first predetermined portion of the identifier and the second predetermined portion of the password do not satisfy the predetermined relation between the first predetermined portion of the identifier and the second predetermined portion of the password.
Claim 28
Dependent Claim
254 words
In a telecommunications system comprising a network service bureau having subscriber accounts and being in communication with one or more subscriber stations via a telecommunications network for the provision of services and information from the network to subscribers located at the subscriber stations, a method is provided for uniquely associating each subscriber with a corresponding subscriber account maintained at the service bureau upon establishment of communications between the subscriber and the service bureau, the method comprising the steps of: creating a subscriber account for each subscriber upon initial communication between the subscriber and the service bureau; associating the subscriber account with a unique telephone number provided by the subscriber, the telephone number being assigned by the telecommunications network to a first subscriber station from which the subscriber currently establishes communications with the service bureau and recorded at the service bureau for future use in associating the subscriber with the subscriber account; detecting the telephone number generated by an automatic number identification service of the network upon subsequent establishments of communication between the subscriber and the service bureau; and selecting the subscriber account associated with the generated telephone number; wherein when the subscriber selects a second different subscriber station for establishing communications with the service bureau, the method further comprises the step of the telecommunications network assigning the same unique telephone number to the second subscriber station such that upon call establishment between the subscriber from the second subscriber station to the service bureau, the previously created subscriber account will be selected for the subscriber.
Claim 29
Dependent Claim
254 words
In a telecommunications system comprising a network service bureau having subscriber accounts and being in communication with one or more subscriber stations via a telecommunications network for the provision of services and information from the network to subscribers located at the subscriber stations, a method is provided for uniquely associating each subscriber with a corresponding subscriber account maintained at the service bureau upon establishment of communications between the subscriber and the service bureau, the method comprising the steps of: creating a subscriber account for each subscriber upon initial communication between the subscriber and the service bureau; associating the subscriber account with a unique telephone number provided by the subscriber, the telephone number being assigned by the telecommunications network to a first subscriber station from which the subscriber currently establishes communications with the service bureau and recorded at the service bureau for future use in associating the subscriber with the subscriber account; detecting the telephone number generated by an automatic number identification service of the network upon subsequent establishments of communication between the subscriber and the service bureau; and selecting the subscriber account associated with the generated telephone number; wherein when the subscriber selects a second different subscriber station for establishing communications with the service bureau, the method further comprises the step of the telecommunications network assigning the same unique telephone number to the second subscriber station such that upon call establishment between the subscriber from the second subscriber station to the service bureau, the previously created subscriber account will be selected for the subscriber.
References Cited (Backward Citations)
US5003595A
Cited
US5301246A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-02-23 | 2001-08-25 | 2002-02-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-02-23 | 2005-08-25 | 2006-02-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-02-23 | 2009-08-25 | 2010-02-24 | $7700.00 | Window Closed / Lapsed |