US6070243A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Deterministic user authentication service for communication network
Assignee: Alcatel USA Sourcing Inc
•
Filing: 1997-06-13
•
Granted: 2000-05-30
•
Expires: 2017-06-13
Abstract
Abstract A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.
Inventors
- 👤 Michael E. See
- 👤 John W. Bailey
- 👤 Charles L. Panza
- 👤 Yuri Pikover
- 👤 Geoffrey C. Stone
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 15:38
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/44; G06F21/445; H04L63/10; H04L63/102; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2137; G06F2221/2141; H04L12/00; H04L12/28; H04L12/46; H04L12/4641; H04L63/0823; H04L63/083; H04L63/101
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
84 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as entries for particular users, user identification information; means for accepting a log-in response entered on an end system, the system having a LAN interface; means for comparing for a match the log-in response with the user identification information; and means for establishing, if a match is found, communicability between the system and a selectable group of the nodes.
Claim 2
Dependent Claim
84 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as entries for particular users, user identification information; means for accepting a log-in response entered on an end system, the system having a LAN interface; means for comparing for a match the log-in response with the user identification information; and means for establishing, if a match is found, communicability between the system and a selectable group of the nodes.
Claim 3
Dependent Claim
24 words
The user authentication service according to claim 1, wherein said LAN interface is operative for communicating with said system in a LAN media type.
Claim 4
Dependent Claim
18 words
The user authentication service according to claim 2, wherein said LAN media type is Ethernet or Token Ring.
Claim 5
Dependent Claim
90 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information and groups of the nodes; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; and means for establishing communicability between the system and each member of a group of the nodes associated with matching user identification information.
Claim 6
Dependent Claim
90 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information and groups of the nodes; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; and means for establishing communicability between the system and each member of a group of the nodes associated with matching user identification information.
Claim 7
Dependent Claim
24 words
The user authentication service according to claim 4, wherein the groups of nodes are represented in the entries by virtual local area network identifiers.
Claim 8
Dependent Claim
107 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information, time restrictions defining an access period and groups of the nodes; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; means for establishing communicability between the system and each member of a group of the nodes associated with matching user identification information, for the defined access period associated with the matching user identification information.
Claim 9
Dependent Claim
107 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information, time restrictions defining an access period and groups of the nodes; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; means for establishing communicability between the system and each member of a group of the nodes associated with matching user identification information, for the defined access period associated with the matching user identification information.
Claim 10
Dependent Claim
24 words
The user authentication service according to claim 6, wherein the groups of nodes are represented in the entries by virtual local area network identifiers.
Claim 11
Dependent Claim
135 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information, groups of the nodes, and enhanced authentication information, the enhanced authentication information identifying an enhanced authentication server operative in the network; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; means for conducting an enhanced authentication session between the system and the enhanced authentication server associated with matching user identification information; and means for establishing, if the enhanced authentication is successfully completed, communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 12
Dependent Claim
135 words
A user authentication service for a communication network including a plurality of nodes each having a different network interface, comprising: means for accepting and storing, as associated entries for particular users, user identification information, groups of the nodes, and enhanced authentication information, the enhanced authentication information identifying an enhanced authentication server operative in the network; means for accepting a log-in response entered on an end system in the network; means for comparing for a match the log-in response with the user identification information; means for conducting an enhanced authentication session between the system and the enhanced authentication server associated with matching user identification information; and means for establishing, if the enhanced authentication is successfully completed, communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 13
Dependent Claim
24 words
The user authentication service according to claim 8, wherein the groups of nodes are represented in the entries by virtual local area network identifiers.
Claim 14
Independent Claim
93 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information and groups of the nodes; (b) accepting a log-in response on an end system in the network; (c) comparing for a match the log-in response with the user identification information; and (d) if a match is found, establishing communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 15
Independent Claim
93 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information and groups of the nodes; (b) accepting a log-in response on an end system in the network; (c) comparing for a match the log-in response with the user identification information; and (d) if a match is found, establishing communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 16
Independent Claim
144 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information, time restrictions and groups of the nodes, the time restrictions defining authorized times; (b) accepting a log-in response on an end system in the network during a log-in attempt; (c) comparing for a user match the log-in response with the user identification information; (d) upon finding a user match, comparing for a time match the authorized times associated with the matching user identification information with the time of the log-in attempt; (e) upon finding a time match, establishing communicability between said system and each member of a group of the nodes associated with the matching user identification information for the authorized time associated with the matching user identification information.
Claim 17
Independent Claim
144 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information, time restrictions and groups of the nodes, the time restrictions defining authorized times; (b) accepting a log-in response on an end system in the network during a log-in attempt; (c) comparing for a user match the log-in response with the user identification information; (d) upon finding a user match, comparing for a time match the authorized times associated with the matching user identification information with the time of the log-in attempt; (e) upon finding a time match, establishing communicability between said system and each member of a group of the nodes associated with the matching user identification information for the authorized time associated with the matching user identification information.
Claim 18
Independent Claim
139 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information, groups of the nodes and enhanced authentication information, the enhanced authentication information identifying an enhanced authentication server operative in the network; (b) accepting a log-in response on an end system in the network; (c) comparing for a match the log-in response with the user identification information; (d) if a match is found, conducting an enhanced authentication method between the system and the identified enhanced authentication server associated with the matching user identification information; and (e) if the enhanced authentication method is successfully completed, establishing communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 19
Independent Claim
139 words
A method for authenticating prospective users of a communication network including a plurality of nodes each having a different network interface, comprising: (a) accepting and storing, as associated entries for particular users, user identification information, groups of the nodes and enhanced authentication information, the enhanced authentication information identifying an enhanced authentication server operative in the network; (b) accepting a log-in response on an end system in the network; (c) comparing for a match the log-in response with the user identification information; (d) if a match is found, conducting an enhanced authentication method between the system and the identified enhanced authentication server associated with the matching user identification information; and (e) if the enhanced authentication method is successfully completed, establishing communicability between the system and each member of a group of the nodes associated with the matching user identification information.
Claim 20
Dependent Claim
95 words
An authentication agent for a user authentication service for a communication network, comprising: means for receiving a log-in response from an end system; means for communicating the log-in response to an authentication server; means for receiving authorized subnetwork information from the authentication server in response to the log-in response; and means for communicating the authorized subnetwork information to a processing means, the processing means applying the authorized subnetwork information to establish rules for communicability between the system and members of different groups of nodes in the network, wherein each node has a different network interface.
Claim 21
Dependent Claim
95 words
An authentication agent for a user authentication service for a communication network, comprising: means for receiving a log-in response from an end system; means for communicating the log-in response to an authentication server; means for receiving authorized subnetwork information from the authentication server in response to the log-in response; and means for communicating the authorized subnetwork information to a processing means, the processing means applying the authorized subnetwork information to establish rules for communicability between the system and members of different groups of nodes in the network, wherein each node has a different network interface.
Claim 22
Dependent Claim
36 words
The authentication agent according to claim 13, further comprising: means for receiving user status information from said authentication server in response to said log-in response; and means for communicating said user status information to said system.
Claim 23
Dependent Claim
21 words
The authentication agent according to claim 13, further comprising means for establishing a secure connection for communicating with said authentication server.
Claim 24
Dependent Claim
19 words
The authentication agent according to claim 15, wherein said secure connection is established through the exchange of authentication keys.
Claim 25
Dependent Claim
24 words
The authentication agent according to claim 13, further comprising means for terminating connectivity with said system after a configurable number of failed log-in attempts.
Claim 26
Dependent Claim
36 words
The authentication agent according to claim 13, wherein said authorized subnetwork information includes time restrictions defining an access period, and wherein said processing means is operative for abolishing the established rules when said access period expires.
Claim 27
Dependent Claim
26 words
The authentication agent according to claim 13, wherein said processing means is operative for abolishing the established rules if said system becomes disconnected from the network.
Claim 28
Dependent Claim
31 words
The authentication agent according to claim 13, wherein said processing means is operative for abolishing the established rules if said agent receives from said server a deactivation instruction for said system.
Claim 29
Dependent Claim
31 words
The authentication agent according to claim 13, wherein said processing means is operative for abolishing the established rules when said system fails to transmit packets for a predetermined length of time.
References Cited (Backward Citations)
US4896319A
Cited
US4922486A
Cited
US5414844A
Cited
US5249230A
Cited
US5499297A
Cited
US5502766A
Cited
US5469576A
Cited
US5657388A
Cited
US5774650A
Cited
US5678004A
Cited
US5564016A
Cited
US5774525A
Cited
US5671354A
Cited
US5721780A
Cited
US5696898A
Cited
US5774551A
Cited
US5684951A
Cited
US5796942A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-05-30 | 2003-11-29 | 2004-05-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-05-30 | 2007-11-29 | 2008-05-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-05-30 | 2011-11-29 | 2012-05-30 | $7700.00 | Window Closed / Lapsed |