Systems and methods for providing content and services on a network system
View Patent ↗Systems and methods for managing and providing content and services on a network system. Aspects of the invention include location-based determination of network content and services that may be provided to client computers. Other aspects of the invention include authorization and authentication components that determine access rights of client computers. Additional aspects include systems and methods for redirecting client computers to different network content. The disclosed systems and methods may be used in numerous network system applications.
1. A method for granting access to a computer network, comprising:
receiving at an access controller a request to access the network from a source computer, the request including a transmission control protocol (TCP) connection request having a source IP address and a destination IP address;
determining by the access controller whether the source computer must login to access the network, including:
comparing the source IP address with profiles of authorized source devices, each profile including an IP address,
wherein if the source IP address is included in a profile of an authorized source device, the source device is granted access without further authorization, and
if the source IP address is not included in a profile associated with an authorized source device, then
determining whether the destination IP address is included in a plurality of destination IP addresses associated with the access controller, wherein if the destination IP address is included in the plurality of destination IP addresses, the source device is granted access without further authorization, and
if the destination IP address is not included in the plurality of destination IP addresses, then the access controller determines the source device must be authorized to access the network and provides the source device with a login page;
using the access controller to authenticate credentials provided from the source device via the login page; and
authorizing the source device access to the network if the provided credentials are authenticated.
2. The method of claim 1 , wherein the providing the source device with a login page comprises providing a portal page to the source device.
3. The method of claim 2 , wherein the login page is provided following a presentation of the portal page to the source device.
4. The method of claim 1 , wherein using the access controller to authenticate credentials comprises using an authentication, authorization, and accounting (AAA) server to authenticate the credentials.
5. The method of claim 4 , wherein authorizing access to the network occurs following successful authentication of the credentials against the AAA server.
6. The method of claim 1 , wherein authorizing access to the network occurs following successful authentication of the credentials against the locally defined list of authorized credentials.
7. The method of claim 1 , wherein the plurality of destination IP addresses includes web sites that are available if the source device is not authenticated.
8. The method of claim 1 , wherein the access controller is configured to access the network via a gateway device.
9. The method of claim 8 , wherein the access controller comprises the gateway device.
10. The method of claim 8 , wherein the access controller is in data communication with the gateway device.
11. A system for providing network access to a source device comprising:
an access controller configured to receive a request to access the network from the source device, the request including a transmission control protocol (TCP) connection request having a source IP address and a destination IP address, the access controller further configured to redirect the source device to a login page if it is determined that authentication is required prior to network access being granted, the authentication based on
comparing the source IP address with profiles of authorized source devices, each profile including an IP address, wherein if the source IP address is included in a profile of an authorized source device, the source device is granted access without further authorization, and
if the source IP address is not included in a profile associated with an authorized device, then
determining whether the destination IP address is included in a plurality of destination IP addresses associated with the access controller, wherein if the destination IP address is included in the plurality of destination IP addresses, the source device is granted access without further authorization, and
if the destination IP address is not included in the plurality of destination IP addresses, then the access controller authorizes network access to the computing device after authenticating user credentials received from the source device via the login page have been authenticated.
12. The system of claim 11 further comprising an authentication, authorization, and accounting (AAA) server, wherein the authorization of network access to the source device occurs following successful authentication of the user credentials against the AAA server.
13. The system of claim 11 , wherein the determining whether the destination IP address is included in the plurality of destination IP addresses is omitted if the source IP address is included in the a profile of an authorized source device.
14. The system of claim 11 , wherein the plurality of destination IP addresses includes web sites that are available if the source device is not authenticated.
15. The system of claim 11 , wherein the access controller is configured to access the network via a gateway device.
16. The system of claim 15 , wherein the access controller comprises the gateway device.
17. The system of claim 15 , wherein the access controller is in data communication with the gateway device.