US6301618B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Forced sequential access to specified domains in a computer network
Assignee: Cisco Technology Inc
•
Filing: 2000-09-11
•
Granted: 2001-10-09
•
Expires: 2020-09-11
Abstract
Abstract The present invention is a method and apparatus for providing the owners of domain sites on a computer network or the owners of private remotely accessible intra networks the capability to force authorized users to disconnect from any open connections to other public or private domains or networks before a connection with the owners domain or network can be established. This forced sequential access of a specified domain or network is accomplished by inserting a sequential-only attribute into the service profile for a specified user. Upon the user initiating a log-on sequence through an access point, the user's service profile is pulled from a memory bank and an assessment is made as to whether or not the sequential-only attribute exists for the desired specified domain or network to be accessed. If the attribute exists and the user has potentially concurrent connections outstanding, the user is alerted of the mandatory requirement to disconnect from these open connections before proceeding further with desired specified domain or network connection.
Inventors
- 👤 Aravind Sitaraman
- 👤 Shuxian Lou
- 👤 Shujin Zhang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 22:17
CPC Classifications
H; H04; H04L; H04L12/00; H04L12/28; H04L12/2854; H04L12/2856; H04L12/2869; H04L12/287; H04L12/2872
Claims Analysis
Total Claims: 42
Claim 1
Independent Claim
158 words
An apparatus for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said apparatus comprising: means for receiving user requested service information from a user in a computer network; means for authorizing said user to access said requested service; means for retrieving from a memory a user service profile associated with the user; means for assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; means for determining whether the user has a current network connection established with another service within the computer network; and means for allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then existing network connections to other services within the computer network.
Claim 2
Independent Claim
158 words
An apparatus for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said apparatus comprising: means for receiving user requested service information from a user in a computer network; means for authorizing said user to access said requested service; means for retrieving from a memory a user service profile associated with the user; means for assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; means for determining whether the user has a current network connection established with another service within the computer network; and means for allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then existing network connections to other services within the computer network.
Claim 3
Dependent Claim
79 words
The apparatus of claim 1 further comprising: means for sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for said requested service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 4
Dependent Claim
56 words
The apparatus of claim 2 further comprising: means for causing the user to disconnect from all then existing network connections to other services of the computer network; and means for causing the user to initiate a service logon application upon the user disconnecting from all then existing network connections to other services of the computer network.
Claim 5
Independent Claim
214 words
An apparatus for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said apparatus comprising: means for initiating a service logon application at the user level; means for providing the service logon application with a requested service name and authorization information; means for sending said requested service information to a computer network service provider; means for authorizing said user to access said requested service; means for causing the computer network service provider to retrieve from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; means for assessing said user service profile at the level of the computer network service provider to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; means for determining at the level of the computer network service provider whether the user has a current network connection established with another service of the computer network; and means for allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 6
Independent Claim
214 words
An apparatus for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said apparatus comprising: means for initiating a service logon application at the user level; means for providing the service logon application with a requested service name and authorization information; means for sending said requested service information to a computer network service provider; means for authorizing said user to access said requested service; means for causing the computer network service provider to retrieve from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; means for assessing said user service profile at the level of the computer network service provider to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; means for determining at the level of the computer network service provider whether the user has a current network connection established with another service of the computer network; and means for allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 7
Dependent Claim
81 words
The apparatus of claim 4 further comprising: means for sending a prompt to the user if the computer network service provider determines that said “sequential only” network access attribute exists in said user service profile for said requested service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 8
Dependent Claim
55 words
The apparatus of claim 5 further comprising: means for causing the user to disconnect from all then-existing network connections to other services of the computer network; and means for re-initiating said service logon application at said user level upon the user disconnecting from all then-existing network connections to other specific services of the computer network.
Claim 9
Independent Claim
167 words
An apparatus for preventing unauthorized access to a specified service within a computer network via a user having both IP forwarding capability and authorization to use the specified service, said apparatus comprising: means for receiving a user request to access the specified service from a user of the computer network; means for authorizing said user to access the specified service; means for retrieving from a memory a user service profile associated with the user; means for assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; means for determining whether the user has a current network connection established with another service of the computer network; and means for allowing, in response to a user request, the user to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to another service of the computer network.
Claim 10
Independent Claim
167 words
An apparatus for preventing unauthorized access to a specified service within a computer network via a user having both IP forwarding capability and authorization to use the specified service, said apparatus comprising: means for receiving a user request to access the specified service from a user of the computer network; means for authorizing said user to access the specified service; means for retrieving from a memory a user service profile associated with the user; means for assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; means for determining whether the user has a current network connection established with another service of the computer network; and means for allowing, in response to a user request, the user to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to another service of the computer network.
Claim 11
Dependent Claim
83 words
The apparatus of claim 7 further comprising: means for sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for the specified service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the user request to access the specified connection.
Claim 12
Dependent Claim
55 words
The method of claim 8 further comprising: means for causing the user to disconnect from all then-existing network connections to other services within the computer network; and means for causing the user to initiate a service logon application upon the user disconnecting from all then existing network connections to other services of the computer network.
Claim 13
Independent Claim
153 words
A method for providing forced sequential network access to a user in a computer network capable of establishing a plurality of separate connections between the user and domain networks, said method comprising: receiving a user request to access a specified service from a user of the computer network; retrieving from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing the user, in response to a user request, to connect to the specified service of the computer network specified in the user request if the computer network service provider determines the user has no then-existing network connections to other services of the computer network.
Claim 14
Independent Claim
153 words
A method for providing forced sequential network access to a user in a computer network capable of establishing a plurality of separate connections between the user and domain networks, said method comprising: receiving a user request to access a specified service from a user of the computer network; retrieving from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing the user, in response to a user request, to connect to the specified service of the computer network specified in the user request if the computer network service provider determines the user has no then-existing network connections to other services of the computer network.
Claim 15
Dependent Claim
77 words
The method of claim 10 further comprising: sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for the specified service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 16
Dependent Claim
50 words
The method of claim 11 further comprising: causing the user to disconnect from all then-existing network connections to other services of the computer network; and causing the user to initiate a service logon application upon the user disconnecting from all then-existing network connections to other services of the computer network.
Claim 17
Independent Claim
139 words
A method for forcing the users of a communication system to access services within the communication system via sequential-only access, said apparatus comprising: accepting service requests from users; granting service authorization to the users based upon user supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; determining whether a user initiating a service access request has a then-existing connection open with another service of the communication system; and generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service the communication system.
Claim 18
Independent Claim
139 words
A method for forcing the users of a communication system to access services within the communication system via sequential-only access, said apparatus comprising: accepting service requests from users; granting service authorization to the users based upon user supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; determining whether a user initiating a service access request has a then-existing connection open with another service of the communication system; and generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service the communication system.
Claim 19
Independent Claim
138 words
A method for forcing the users of the system to gain access to specified domain networks via sequential-only access, said system comprising: providing a plurality of host computers connected to network access points, said network access points including authentication servers and gateway devices; storing a plurality of user service profiles, said user service profiles capable of having a “sequential only” network access attribute associated with user authorized services; accepting service requests from users; granting service authorization to the users based upon user-supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; and determining whether a user initiating a service access request has a then-existing connection open to another service of the communication system.
Claim 20
Independent Claim
138 words
A method for forcing the users of the system to gain access to specified domain networks via sequential-only access, said system comprising: providing a plurality of host computers connected to network access points, said network access points including authentication servers and gateway devices; storing a plurality of user service profiles, said user service profiles capable of having a “sequential only” network access attribute associated with user authorized services; accepting service requests from users; granting service authorization to the users based upon user-supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; and determining whether a user initiating a service access request has a then-existing connection open to another service of the communication system.
Claim 21
Dependent Claim
53 words
The method of claim 14 further comprising: generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service of the communication system.
Claim 22
Dependent Claim
168 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said method comprising: method for receiving user requested service information from a user in a computer network; authorizing said user to access said requested service; retrieving from a memory a user service profile associated with the user; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; determining whether the user has a current network connection established with another service within the computer network; and allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then existing network connections to other services within the computer network.
Claim 23
Dependent Claim
168 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said method comprising: method for receiving user requested service information from a user in a computer network; authorizing said user to access said requested service; retrieving from a memory a user service profile associated with the user; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; determining whether the user has a current network connection established with another service within the computer network; and allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then existing network connections to other services within the computer network.
Claim 24
Dependent Claim
80 words
The device of claim 16 wherein said method further comprises: sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for said requested service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 25
Dependent Claim
55 words
The device of claim 17 wherein said method further comprises: causing the user to disconnect from all then existing network connections to other services of the computer network; and causing the user to initiate a service logon application upon the user disconnecting from all then existing network connections to other services of the computer network.
Claim 26
Dependent Claim
218 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said method comprising: initiating a service logon application at the user level; providing the service logon application with a requested service name and authorization information; sending said requested service information to a computer network service provider; authorizing said user to access said requested service; causing the computer network service provider to retrieve from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile at the level of the computer network service provider to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; determining at the level of the computer network service provider whether the user has a current network connection established with another service of the computer network; and allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 27
Dependent Claim
218 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing multiple concurrent service connections, said method comprising: initiating a service logon application at the user level; providing the service logon application with a requested service name and authorization information; sending said requested service information to a computer network service provider; authorizing said user to access said requested service; causing the computer network service provider to retrieve from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile at the level of the computer network service provider to determine if a “sequential-only” network access attribute exists within said user service profile for said requested service; determining at the level of the computer network service provider whether the user has a current network connection established with another service of the computer network; and allowing, in response to a user request, the user to connect to the desired service of the computer network specified in the user service request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 28
Dependent Claim
82 words
The device of claim 19 wherein said method further comprises: sending a prompt to the user if the computer network service provider determines that said “sequential only” network access attribute exists in said user service profile for said requested service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 29
Dependent Claim
54 words
The device of claim 20 wherein said method further comprises: causing the user to disconnect from all then-existing network connections to other services of the computer network; and re-initiating said service logon application at said user level upon the user disconnecting from all then-existing network connections to other specific services of the computer network.
Claim 30
Dependent Claim
175 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for preventing unauthorized access to a specified service within a computer network via a user having both IP forwarding capability and authorization to use the specified service, said method comprising: receiving a user request to access the specified service from a user of the computer network; authorizing said user to access the specified service; retrieving from a memory a user service profile associated with the user; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing, in response to a user request, the user to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to another service of the computer network.
Claim 31
Dependent Claim
175 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for preventing unauthorized access to a specified service within a computer network via a user having both IP forwarding capability and authorization to use the specified service, said method comprising: receiving a user request to access the specified service from a user of the computer network; authorizing said user to access the specified service; retrieving from a memory a user service profile associated with the user; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing, in response to a user request, the user to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to another service of the computer network.
Claim 32
Dependent Claim
84 words
The device of claim 22 wherein said method further comprises: sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for the specified service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the user request to access the specified connection.
Claim 33
Dependent Claim
54 words
The device of claim 23 wherein said method further comprises: causing the user to disconnect from all then-existing network connections to other services within the computer network; and causing the user to initiate a service logon application upon the user disconnecting from all then existing network connections to other services of the computer network.
Claim 34
Dependent Claim
174 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing a plurality of separate connections between the user and domain networks, said method comprising: receiving a user request to access a specified service from a user of the computer network; retrieving from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing the user, in response to a user request, to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 35
Dependent Claim
174 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for providing forced sequential network access to a user in a computer network capable of establishing a plurality of separate connections between the user and domain networks, said method comprising: receiving a user request to access a specified service from a user of the computer network; retrieving from a memory a user service profile associated with the user and uniquely identified by user-provided identification information; assessing said user service profile to determine if a “sequential-only” network access attribute exists within said user service profile for the specified service; determining whether the user has a current network connection established with another service of the computer network; and allowing the user, in response to a user request, to connect to the specified service of the computer network specified in the user request if the computer network service provider determines that the user has no then-existing network connections to other services of the computer network.
Claim 36
Dependent Claim
80 words
The device of claim 25 wherein said method further comprises: sending a prompt to the user if a determination is made that said “sequential only” network access attribute exists in said user service profile for the specified service and the computer network service provider determines that said user has a current network connection established with another service of the computer network, said prompt advising the user to disconnect from all then-existing network connections before proceeding with the requested service connection.
Claim 37
Dependent Claim
53 words
The device of claim 26 wherein said method further comprises: causing the user to disconnect from all then-existing network connections to other services of the computer network; and causing the user to initiate a service logon application upon the user disconnecting from all then-existing network connections to other services of the computer network.
Claim 38
Dependent Claim
159 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for forcing the users of a communication system to access services within the communication system via sequential-only access, said method comprising: accepting service requests from users; granting service authorization to the users based upon user supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; determining whether a user initiating a service access request has a then-existing connection open with another service of the communication system; and generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service the communication system.
Claim 39
Dependent Claim
159 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method for forcing the users of a communication system to access services within the communication system via sequential-only access, said method comprising: accepting service requests from users; granting service authorization to the users based upon user supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; determining whether a user initiating a service access request has a then-existing connection open with another service of the communication system; and generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service the communication system.
Claim 40
Dependent Claim
167 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method of operating a communicating system capable of forcing the users of the system to gain access to specified domain networks via sequential-only access, said system including providing a plurality of host computers connected to network access points, said network access points including authentication servers and gateway devices, said method comprising: storing a plurality of user service profiles, said user service profiles capable of having a “sequential only” network access attribute associated with user authorized services; accepting service requests from users; granting service authorization to the users based upon user-supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; and determining whether a user initiating a service access request has a then-existing connection open to another service of the communication system.
Claim 41
Dependent Claim
167 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine for performing a method of operating a communicating system capable of forcing the users of the system to gain access to specified domain networks via sequential-only access, said system including providing a plurality of host computers connected to network access points, said network access points including authentication servers and gateway devices, said method comprising: storing a plurality of user service profiles, said user service profiles capable of having a “sequential only” network access attribute associated with user authorized services; accepting service requests from users; granting service authorization to the users based upon user-supplied authorization information; generating service profile requests; sending said service profile requests to a memory; accepting requested service profiles from the memory; assessing said requested service profiles for the presence of a “sequential-only” access attribute; and determining whether a user initiating a service access request has a then-existing connection open to another service of the communication system.
Claim 42
Dependent Claim
56 words
The device of claim 29 wherein said method further comprises: generating a prompt to be sent to a user initiating a service access request if a determination is made that a requested service is protected with a “sequential only” access attribute and said user has a then-existing connection open with another service of the communication system.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-10-08 | 2005-04-09 | 2005-10-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-10-08 | 2009-04-09 | 2009-10-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-10-08 | 2013-04-09 | 2013-10-09 | $7700.00 | Window Closed / Lapsed |