Multiple access point zero sign-on
AssigneeCable Television Laboratories, Inc.
InventorStuart A. Hoggan
Life of this patent
Estimating the term…
Abstract
The ability to connect a device to the Internet or another type of network from various network access points in a convenient manner is contemplated. The device may be conveniently connected to the desired network without requiring user input of a username and password when connecting to the various network access points.
Claims20
A method of facilitating zero sign-on access for a device that travels from a first access point to a second access point, the first access point having recently connected the device to the Internet such that a first access point sign-on operation previously completed by the device through the first access point is still valid, the second access point not having recently connected the device to the Internet such that any second access point sign-on operation previously completed by the device through the second access point is now invalid, the first and second access points communicating through an Internet gateway controller to connect the device with the Internet, the Internet gateway controller requiring a trusted authentication session token to permit the device to connect through the first and second access points to the Internet, an identity provider (IdP) being configured to provide the trusted authentication session token, the method comprising:
- provisioning the device with a trusted authentication session token as part of the first access point sign-on operation;
- and
- conducting a second access point sign-on operation for connecting the device to the Internet through the second access point, the second access point sign-on operation being completed with zero sign-on such that a username and password associated with the trusted authentication session token is not entered with the device through the second access point, the second access point sign-on operation including:
- i) the device transmitting the trusted authentication session token to the IdP through the second access point;
- ii) the IdP verifying the trusted authentication session token, and if verified, providing an assertion to the device through the second access point;
- and
- iii) the Internet gateway connecting the device to the Internet upon receipt of the assertion through the second access point from the device.
A method of facilitating zero sign-on access to the Internet for a device that travels from a first access point to a second access point, the first and second access points being configured to direct signaling between the device and at least one Internet gateway, the at least one Internet gateway being configured to direct signaling between the device and the Internet by way of at least one of the first and second access points, the method comprising:
- provisioning the device with a trusted authentication session token as part of a first zero sign-on operation conducted through the first access point, the first zero sign-on operation including an identity provider (IdP) providing the trusted authentication session token to the device in the event the first access point is determined to be trusted;
- and
- facilitating connection of the device to the Internet through the second access point with completion of a second zero sign-on operation, the second zero sign-on operation including:
- i) the IdP providing an assertion to the device through the second access point in response to receiving and verifying the trusted authentication session token as communicated from the device through the second access point;
- and
- ii) the Internet gateway directing signaling between the device and the Internet upon receipt of the assertion as communicated from the device through the second access point.
A system for providing Internet access for a device, the system comprising:
- an Internet gateway controller configured to direct connections between the device and the Internet;
- an identity provider (IdP) configured to authenticate the device, the IdP being configured to provide a trusted authentication session token and an assertion to the device;
- a first access point configured to provide connections between the device and the Internet gateway controller and the IdP, the first access point assigning a first IP address to the device when connected thereto;
- a second access point configured to provide connections between the device and the Internet gateway controller and the IdP, the second access point assigning a second IP address to the device when connected thereto;
- wherein the Internet gateway controller is configured to direct connections through the first access point between the device and the Internet with zero sign-on upon receipt of the trusted authentication session token, the zero sign-on access characterized by the device connecting to the Internet without having to input a username and password;
- wherein the IdP is configured to provide the trusted authentication session token to the device when connected to the first access point if the first IP address matches with a trusted IP address, wherein the IdP is prevented from providing the trusted authentication session token to the device when connected to the second access point such that the device must connect through the first access point at least once in order to receive the trusted authentication session token from the IdP;
- wherein the Internet gateway controller is configured to direct connections through the second access point between the device and the Internet with zero sign-on upon receipt of the assertion;
- and
- wherein the IdP is configured to provide the assertion to the device when connected to the second access point upon receipt of the trusted authentication session token.
Dependencies are inferred from the claim text.