Protocol, system, and method for transferring user authentication information across multiple, independent internet protocol (IP) based networks
OwnerSamuel A. Robertson, Ann O'Quain +1inventors
InventorsSamuel A. Robertson, Ann O'Quain, Bryan K. Copeland
Life of this patent
Estimating the term…
Abstract
A protocol for transferring user authentication information across independent IP networks, for allowing a roaming user to access IP network resources from any IP network location having connectivity to an internet protocol based shared authentication network (IPSAN) thereby utilizing the resources of any affiliated network regardless of user's location.
Claims12
An Internet Protocol based Shared Authentication Protocol (ISAP) utilizing a single step user logon to an affiliation of independent IP networks having a plurality of authentication programs whereby a user of any one of the IP networks is allowed to gain access to any IP network by way of any of the affiliated independent IP network's resources, the IPSAP comprising:
- a) establishing a communication link between each affiliated independent IP based network through a base server connected to and located at each affiliated network with each base server, having a unique network identifier name;
- b) establishing a communication link between each said base server and a remote central server said central server providing authentication and encryption for said affiliated independent networks;
- and
- c) utilizing a user's existing logon name in combination with user's said network identifier name in the format of net-id/username for authentication and authorization as a registered user of one of said affiliated independent IP based networks for accessing the resources of any of said affiliated independent IP based networks.
An Internet Protocol Shared Authentication protocol system comprising:
- a) a plurality of independent IP based networks having a plurality of authentication programs;
- b) a base server having a unique digital identifier name located at and in communication with each of said independent IP based networks;
- c) a central server in communication with each said base server;
- d) a software program loaded on each said base server having means for identifying and authenticating a user of any of said IP based networks using only said user's home IP network identification and username in the format of net-id/username;
- e) a means for allowing each said base server to communicate with any of said plurality of IP based network's base server independently of said central server;
- and
- f) a software program loaded on said central server having means for identifying said base servers and providing PGP public keys for authentication between each said base server.
An IPSAP comprising a means for allowing a roaming user to utilize the resources of an affiliated group of independent IP based networks having different authentication programs, said means comprising an IPSAP base server having a unique identifier name located at each of said independent IP base networks, said base server being in communication with each said IP based network, an IPSAP central server in communication with each said IPSAP base servers providing communication between said affiliated independent IP based networks, a means for identifying and authenticating any of said independent IP networks and their users and thereby allowing access to any of said affiliate independent IP network's resources by a user of any of said affiliated independent networks regardless of user's access provider network, and a means for maintaining independent trust relationships between each of said independent IP networks.
A method for IP based network connectivity by a computer user subscribing first to an independent IP network host by way of a second independent IP network host, thereby utilizing the resources of the second independent IP network host provider without subscribing thereto comprising the steps of:
- a) providing an IPSAP base server having a unique identifier name and PGP public/private keys located at each of a plurality of independent IP network host each IPSAP base server in communication with said host's IP network;
- b) providing an IPSAP central server in communication with each of said IPSAP base servers;
- c) providing authentication information for each IP network user with said unique identifier name as a prefix;
- d) authenticating a user and allowing connection upon logon utilizing said IPSAP base server to query said IPSAP central server for authentication of the originating IPSAP base server and obtaining a destination IP address and PGP public key;
- and
- e) exchanging authentication information between said destination IPSAP base server and said origination IPSAP base server independent of said IPSAP central server.
Dependencies are inferred from the claim text.