IP Library › Granted Patent US 11,503,025
Granted Patent B2
US 11,503,025 · App. 16/716,981 · Granted Nov 15, 2022

Solution for receiving network service

Inventor: Jarkko Westerling (Espoo, FI)
Assignee: TELIA COMPANY AB
H04L63/0884H04L45/74H04L63/0876H04L63/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,503,025
App. No.
16/716,981
Granted
Nov 15, 2022
Kind
B2
Abstract

Disclosed is a method including: receiving, by a routing device, a message; determining an indication of an authentication server for authenticating the user to access the network service; and generating an authentication request including at least the user identifier derived from the data structure to the determined authentication server. Also disclosed is a routing device and a computer program product.

Claims (33)

1. A method that is performed by a routing device in communication with a communication network, comprising:

receiving, via the network, a message for requesting access to a requested network service, the message comprising a data structure that includes a user identifier of a user requesting access to the requested network service and an indication of an authentication server, the indication of the authentication server expressing one of:

(i) the authentication server is a public authentication server configured to implement authentication for users not requesting access to a network service provided by a private entity,

(ii) the authentication server is a private authentication server configured to implement authentication for the user identifier requesting access to the network service provided by the private entity;

generating and transmitting an authentication request comprising at least the user identifier derived from the data structure to the authentication server derived from the indication of the authentication server, for authenticating the user to access the requested network service; and

receiving, in response to the generating and transmitting of the authentication request, a confirmation that the user identifier is valid, and adding the user represented with the user identifier to a routing table for allowing the user to access the requested network service.

2. The method of claim 1 , wherein the message is received from a user equipment, wherein:

the user identifier is obtained from a medium accessible by the user equipment,

the message comprising the data structure including the user identifier is generated, and

the generated message comprising the data structure including the user identifier is transmitted to the routing device.

3. The method of claim 1 , wherein, in response to a detection that the authentication server derived from the indication of the authentication server is the public authentication server, the routing device carries out a step of deriving a location of the public authentication server.

4. The method of claim 1 , wherein, in response to a detection that the authentication server derived from the indication of the authentication server is the private authentication server, the generation of the authentication request to the authentication server derived from the indication of the authentication server comprises:

indicating a connection request in the authentication request to the private authentication server by setting a user address derived from the data structure as a source of the communication, and

receiving a connection request from the authentication server to a user equipment of the user over a secured connection.

5. The method of claim 1 , wherein a data entry of the user is added in a routing table of the routing device.

6. The method of claim 5 , wherein the data entry comprises a routing address of the user with the user identifier.

7. A routing device, comprising:

at least one processor; and

at least one memory including computer program code stored therein, the routing device configured to be in communication with a communication network, and the computer program code stored in the memory configured to, upon execution by the at least one processor, causing the routing device to perform operations of:

receiving, via the network, a message for requesting access to a requested network service, comprising a data structure that includes a user identifier of a user requesting access to the requested network service and an indication of an authentication server, the indication of the authentication server expressing one of: (i) the authentication server is a public authentication server configured to implement authentication for users not requesting access to a network service provided by a private entity, (ii) the authentication server is a private authentication server configured to implement authentication for the user identifier requesting access to the network service provided by the private entity;

generating and transmitting an authentication request comprising at least the user identifier derived from the data structure to the authentication server derived from the indication of the authentication server, for authenticating the user to access the requested network service; and

receiving, in response to the generating and transmitting of the authentication request, a confirmation that the user identifier is valid, and adding the user represented with the user identifier to a routing table for allowing the user to access the requested network service.

8. The routing device of claim 7 , wherein the routing device is further configured to, in response to a detection that the authentication server is the public authentication server, derive a location of the public authentication server.

9. The routing device of claim 7 , wherein the routing device is configured to, in response to a detection that the authentication server derived from the indication of the authentication server is the private authentication server, perform the generation of the authentication request to the authentication server derived from the indication of the authentication server by:

indicating a connection request in the authentication request to the private authentication server by setting a user address derived from the data structure as a source of the communication, and

receiving a connection request from the authentication server to a user equipment of the user over a secured connection.

10. A non-transitory computer-readable medium on which is stored a computer program which, when executed by a processor of a routing device, causes a routing device configured for communication with a communication network to perform the operations of:

receiving, via the network, a message for requesting access to a requested network service, the message comprising a data structure that includes a user identifier of a user requesting access to the requested network service and an indication of an authentication server, the indication of the authentication server expressing one of:

(i) the authentication server is a public authentication server configured to implement authentication for users not requesting access to a network service provided by a private entity,

(ii) the authentication server is a private authentication server configured to implement authentication for the user identifier requesting access to the network service provided by the private entity;

generating and transmitting an authentication request comprising at least the user identifier derived from the data structure to the authentication server derived from the indication of the authentication server, for authenticating the user to access the requested network service; and

receiving, in response to the generating and transmitting of the authentication request, a confirmation that the user identifier is valid, and adding the user represented with the user identifier to a routing table for allowing the user to access the requested network service.

11. The method of claim 2 , wherein, in response to a detection that the authentication server derived from the indication of the authentication server is the public authentication server, the routing device carries out a step of deriving a location of the public authentication server.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 17, 2019
From: WESTERLING, JARKKO
To: TELIA COMPANY AB
Reel/Frame 051305/0545 →
Priority Claims (1)
FI 20186093 · Dec 17, 2018 · national
Continuity (1)
Related Publication 20200195643A1 · Jun 18, 2020
Cited By (2)
US 12,256,305 US 12,483,964