Method for creating internet network access accounts
11146418 · 2021-10-12
Inventors
Cpc classification
H04L63/0846
ELECTRICITY
International classification
Abstract
A method for creating accounts for accessing the Internet network through a unique terminating point of a premise provided with an internal handler includes transmitting to the internal handler, through the terminating point, numerical data associated with the connection parameters of the native account of the first subscriber, and numerical data associated with connection parameters of a second Internet network access account of a second subscriber, for each of the two subscribers to connect to the Internet network with his own connection parameters through the terminating point shared between the two the subscribers. The method further includes connecting a modem-router parameterized with the connection parameters of the second, to the internal handler, and transmitting to the modem-router a session authorization signal authorizing the modem-router to process the numerical data associated with the connection parameters of the second account and which travel through the terminating point.
Claims
1. A method for creating accounts for accessing the Internet network through a unique terminating point of a premise provided with an internal handler, the terminating point is adapted to authorize the transmission of numerical data to the internal handler, the numerical data are associated with connection parameters of a first native Internet network access account of a first subscriber, the first native internet network access being provided by an internet access provider, the method comprising: transmitting to the internal handler, through the terminating point, in addition to the numerical data associated with the connection parameters of the native account of the first subscriber, other numerical data associated with connection parameters of a second Internet network access account of a second subscriber, the connection parameters of the second account being different from the connection parameters of the first native account, wherein for each of the two subscribers to connects to the Internet network with his own connection parameters through the terminating point shared between the two subscribers, the method further comprises: parametrizing a modem-router with the connection parameters of the second account, connecting the modem-router to the internal handler, transmitting to the modem-router a session authorization signal authorizing the modem-router to process the numerical data associated with the connection parameters of the second account and which travel through the terminating point, which signal is emitted from an item of equipment of the Internet access provider.
2. The method according to claim 1, wherein: the modem-router generates an authentication requests containing identification data of the second access account and transmits the authentication request to an item of equipment of the Internet access provider of the first subscriber, the connection of the modem-router to the internal handler, or the insertion of a secure removable media device into a connection interface of the modem-router, being the element for triggering the generation and the transmission of the authentication request, the item of equipment of the Internet access provider of the first subscriber generates and transmits to an item of equipment of the Internet access provider of the second subscriber a polling request aiming to verify that the second subscriber is indeed affiliated with the access provider identified in the authentication request, the receipt of the authentication request being the element triggering the generation and the transmission of the polling request, the item of equipment of the Internet access provider of the second subscriber verifies that the second subscriber is indeed affiliated with the access provider identified in the authentication request, the receipt of the polling request being the element triggering the verification procedure; and, in case of positive verification, the item of equipment of the Internet access provider of the second subscriber generates and transmits to the item of equipment of the Internet access provider of the first subscriber an authorization signal, the receipt of the authorization signal results in the generation and the transmission of the session authorization signal, by the item of equipment of the Internet access provider of the first subscriber to the modem-router.
3. The method according to claim 1, wherein in connecting the terminating point to a transmission line connected to an item of equipment of an Internet access provider managing the native account and multiplexing the transmission line so that the numerical data associated with the connection parameters of the second account of the second subscriber and the numerical data associated with the connection parameters of the native account of the first subscriber simultaneously travel through the transmission line.
4. The method according to claim 3, wherein the connection of the modem-router to the internal handler is a triggering element resulting in the automatic implementation of a logical computer process leading to the multiplexing of the transmission line.
5. The method according to claim 3, wherein the disconnection of the modem-router from the internal handler is a triggering element resulting in the automatic implementation of a logical computer process leading to the stopping of the multiplexing of the transmission line.
6. The method according to claim 3, wherein the insertion of the secure removable media device into the connection interface is a triggering element resulting in the implementation of a logical computer process leading to the multiplexing of the transmission line.
7. The method according to claim 3, wherein the withdrawal of the secure removable media device from the connection interface is a triggering element resulting in the automatic implementation of a logical computer process leading to the stopping of the multiplexing of the transmission line.
8. The method according to claim 1, wherein integrating into the session authorization signal data relating to the connection parameters of the second account, the receipt of the session authorization signal by the modem-router, resulting in the automatic parametrization of the modem-router with the connection parameters.
9. The method according to claim 1, wherein parametrizing the modem-router: by connecting the modem-router to an electronic device serving as interface, then by manually entering the connection parameters of the second account through the electronic device serving as interface, and by saving the connection parameters in a memory of the modem-router.
10. The method according to claim 1, wherein parametrizing the modem-router: by connecting the modem-router to another modem-router already parametrized with the connection parameters of the second account, and copying all of the connection parameters saved in the other modem-router in a memory of the modem-router.
11. The method according to claim 1, further comprising: saving in a secure removable media device the connection parameters of the second account, equipping the modem-router with a connection interface adapted to receive the secure removable media device, the insertion of the secure removable media device into the connection interface is a triggering element resulting in the automatic parametrization of the modem-router with the connection parameters of the second account saved in the secure removable media device.
12. The method according to claim 1, further comprising: saving in a secure removable media device identification data of the second account, equipping the modem-router with a connection interface adapted to receive the secure removable media device, the insertion of the secure removable media device into the connection interface is a triggering element resulting in the automatic implementation of a logical computer process leading to the automatic parametrization of the modem-router with the connection parameters of the second account.
13. The method according to claim 1, wherein connecting the modem-router between the terminating point and a native modem-router connected to the internal handler, which native modem-router is parametrized with the connection parameters of the first native account, an item of equipment of the second subscriber not being able to communicate with the native modem-router without knowledge of the connection parameters of the first native account and an item of equipment of the first subscriber not being able to communicate with the modem-router without knowledge of the connection parameters of the second account.
14. The method according to claim 13, wherein receiving in the native modem-router, the numerical data associated with the connection parameters of the first native account and the numerical data associated with the connection parameters of the second account which travel through the terminating point, and only processing in the native modem-router the numerical data associated with the connection parameters of the first native account.
15. The method according to claim 13, further comprising: receiving in the modem-router, the numerical data associated with the connection parameters of the first native account and the numerical data associated with the connection parameters of the second account which travel through the terminating point, only processing in the modem-router the numerical data associated with the connection parameters of the second account, sending back towards the native modem-router and from the modem-router, the numerical data associated with the connection parameters of the first native account.
16. The method according to claim 1, wherein parametrizing the modem-router with the connection parameters of the second account and with the connection parameters of the first native account so that the modem-router processes the numerical data associated with the connection parameters of the first native account and the numerical data associated with the connection parameters of the second account, and which travel through the terminating point, the modem-router being adapted to be used simultaneously by the first subscriber and the second subscriber, same keeping their own Internet network access accounts and their own connection parameters.
17. The method according to claim 1, wherein in response to the receipt of the session authorization signal, the modem-router generates and transmits a session electronic signature to an item of equipment of the Internet access provider of the second subscriber and/or to the Internet access provider of the first subscriber, which signature is used to track the connection histories of the second subscriber when he uses the modem-router from the internal handler of the dwelling of the first subscriber.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
(1) Other advantages and features of the invention shall appear better when reading the following description of a preferred embodiment, in reference to the attached drawings, provided as non-limiting examples for the purpose of information and wherein:
(2)
(3)
(4)
(5)
(6)
(7)
(8)
(9)
(10)
(11)
(12)
(13)
(14)
(15)
DETAILED DESCRIPTION
(16) The method subject matter of the invention consists of a coherent sequence of steps for achieving a desired result. These steps result in the handling of physical elements, notably signals (electric or magnetic) capable of being stored, transferred, combined, compared, etc.
(17) The method is implemented through the intermediary of computer applications run by computer devices. In the interest of clarity, it should be understood within the meaning of the invention that “the device does something” means “the computer application run by the processor or microprocessor of the device does something”. Just like “the computer application does something” means “the computer application run by the processor or microprocessor of the device does something”.
(18) Again, in the interest of clarity, the present invention makes reference to one or more “logical computer processes”. The latter correspond to the actions or results obtained by the running of instructions of various computer applications. Also, it should also be understood within the meaning of the invention that “a logical computer process does something” means “the instructions of one or more computer applications run by one or more processors or microprocessors do something”.
(19) The implementation of the method subject matter of the invention requires the use of a modem-router MR′. The latter may be in the form of a box of relatively reduced dimensions, having, at most, the overall size of an Internet box.
(20) By referring to
(21) The memory or memories 51 must be considered as a storage device also adapted to store data and/or data files. It may concern a native memory or an add-on memory such as a Secure Digital (SD) card. The MAC address of the modem-router MR′ is saved in the memory 51, the MAC address being unique is pre-saved in the factory.
(22) The network interface 52 is a wired or wireless communication interface adapted to establish a communication with the items of equipment E.sub.B of the subscriber B, by using, for example, a private security key (e.g.: WEP, WAP, WAP2 key, etc.). The network interface 52 may, for example, comprise a Wi-Fi transmitter/receiver, an Ethernet connection, a PLC (Power-line Communication) connection, a Bluetooth module, or any other means of connection to the modem-router MR′. In general, the network interface 52 has the function of managing the connections between the modem-router MR′ and the items of electronic equipment E.sub.B of the subscriber B.
(23) The modem-router MR′ may be parametrized beforehand with the connection parameters of an Internet network access account. In order to follow the aforementioned example, the modem-router MR′ is, for example, parametrized with the connection parameters of the subscriber B. These connection parameters notably include the unique identifier of the subscriber B, an item of identification data of the Internet access provider of the subscriber B (which indication may be included in the unique identifier), a private security key (e.g.: WEP, WAP or WAP2 key) and optionally certain rights and/or restrictions open to the subscriber B (e.g.: access rights to pay-per-view television channels, parental control, firewall, landline telephone number, etc.).
(24) This parametrization of the modem-router MR′ may be performed in the dwelling of the subscriber B, prior to his installation in the dwelling of the subscriber A. The parametrization may also be performed directly in the dwelling of the subscriber A. Various parametrization methods are then possible.
(25) The subscriber B may, for example, use a computer or a Smartphone (or another electronic device) that he connects in a wired (for example, with an Ethernet cable) or wireless (for example, by Wi-Fi) manner to the modem-router MR′. This computer or this Smartphone acts as interface so that the subscriber B enters his connection parameters manually. These connection parameters thus input are saved in the memory 51 of the modem-router MR′.
(26) In an alternative embodiment, the subscriber B connects in a wired (for example, with an Ethernet cable) or wireless (for example, by Wi-Fi) manner the modem-router MR′ to his native modem-router MR.sub.B. In response to this connection, or in response to the activation of a dedicated key installed on the box of the modem-router MR′, all of the connection parameters saved in the native modem-router MR.sub.B are copied in the memory 51 of the modem-router MR′.
(27) In another alternative embodiment, the connection parameters may be saved in a secure removable media device such as a smart card, SIM (Subscriber Identity Module) card, SD (Secure Digital) card or a USB (Universal Serial Bus) stick. The Internet access provider of the subscriber B may provide him with the pre-parametrized media device that can then be inserted into a generic modem-router MR′ purchased in a store by the subscriber B. Such card may also be inserted into a generic modem-router MR′ purchased in a store by the subscriber A and installed in the dwelling of the latter as explained above in the description in reference to
(28) In
(29) The connection of the modem-router MR′ during line cutoff is schematized in
(30) The subscribers A and B may each have a different Internet access provider. For example, the subscriber A is affiliated with Orange® and the subscriber B is affiliated with SFR®. The DSLAM.sub.A and DSLAM.sub.B may be located in the same MDF or in MDFs that are distinct and remote from one another.
(31) In
(32) On the alternative embodiment in
(33) On another alternative embodiment in
(34)
(35) Event 1: The modem-router MR′ is parametrized with the connection parameters of the Internet network access account of the subscriber B.
(36) Step 2: Connection of the modem-router MR′ during line cutoff, between the terminating point P.sub.A and the native modem-router MR.sub.A of the subscriber A. This Step 2 may be implemented before or after Event EV1.
(37) Step 3: The modem-router MR′ generates and transmits an authentication request to the Internet access provider of the subscriber A. The connection of the modem-router MR′ to the internal handler is the element triggering the generation and the transmission of the authentication request. This authentication request is transmitted via the transmission line LA, preferably in destination of the DSLAM.sub.A. Nevertheless, the authentication request may be transmitted to another item of equipment of the Internet access provider of the subscriber A, for example, a dedicated Internet server. Said authentication request notably contains numerical data corresponding to the MAC address of the modem-router MR′, the unique identifier of the subscriber B and an item of identification data of the Internet access provider of the subscriber B, and more generally contains identification data of the access account of the subscriber B.
(38) Step 4: The Internet access provider of the subscriber A generates and transmits to the Internet access provider of the subscriber B, a polling request aiming to verify that the subscriber B is indeed affiliated with the access provider identified in the authentication request. The receipt of the authentication request is the element triggering the generation and the transmission of the polling request. The polling request may contain all or part of the numerical data contained in the authentication request. In the figures attached, it is the DSLAM.sub.A that generates and transmits the polling request to the DSLAM.sub.B, the communication between the DSLAM.sub.A and the DSLAM.sub.B being schematized by the dotted line. The generation and the transmission of the polling request may be initiated from another item of equipment of the Internet access provider of the subscriber A and/or transmitted to another item of equipment of the Internet access provider of the subscriber B, for example, a dedicated server. The communication between the two providers is therefore not necessarily produced between the respective DSLAM thereof but may involve other equipment.
(39) Step 5: The Internet access provider of the subscriber B verifies that the subscriber B is indeed affiliated therewith. The receipt of the polling request is the element triggering the verification procedure. In the figures attached, it is the DSLAM.sub.B that performs such verification, but this task may be produced by another item of equipment of the Internet access provider of the subscriber B. In practice, the verification consists of polling a table stored in a database, which table comprising a list of identification data associated with respective subscriber access accounts. If the identification data are stored in the table, the Internet access provider of the subscriber B generates and transmits to the Internet access provider of the subscriber A an authorization signal. In the figures attached, it is the DSLAM.sub.B that generates and transmits the authorization signal to the DSLAM.sub.A.
(40) Event 6: In response to the receipt of the authorization signal, the Internet access provider of the subscriber A opens access rights to the subscriber B. The receipt of the authorization signal is the element triggering the opening of access rights. Such access rights are notably access rights to his equipment, which rights may, for example, be limited over time (Internet session limited over a period of 1 day to 15 days, for example) and/or restricted to a portion of bandwidth. To this end, the subscriber A may, via the interface of a dedicated Internet site, tell his access provider beforehand that he plans to rent his dwelling for a given period, that the sharing of his terminating point P.sub.A is only authorized for this given period, for only a portion of his bandwidth.
(41) Step 7: The Internet access provider of the subscriber A generates and transmits to the multiplexer MUX (R.sub.MUX, SR.sub.MUXA or DSLAM.sub.MUXA), a control signal in order to multiplex the transmission line LA of the subscriber A, so as to simultaneously pass through this transmission line LA (and therefore the terminating point P.sub.A) not only the numerical data associated with the connection parameters of the subscriber A, but also the numerical data associated with the connection parameters of the subscriber B. In
(42) Step 8: The Internet access provider of the subscriber A generates and transmits to the modem-router MR′, a session authorization signal. In
(43) Step 9: The item or items of equipment E.sub.B of the subscriber B can now connect to the modem-router MR′, via a wired (e.g.: Ethernet) or wireless (e.g.: Wi-Fi) connection and navigate on the Internet with the connection parameters of the subscriber B. The item or items of equipment E.sub.B of the subscriber B may notably communicate with the modem-router MR′, via the interface 52, with the private security key (e.g.: WEP, WAP or WAP2 key) associated with the connection parameters of the subscriber B (
(44) Step 10: When the modem-router MR′ is disconnected from the internal handler of the dwelling of the subscriber A, a disconnection signal is transmitted to the Internet access provider of the subscriber A. The disconnection of the modem-router MR′ is therefore the element triggering the generation and the transmission of the disconnection signal. The modem-router MR′ may, for example, automatically emit the disconnection signal. Such disconnection signal is transmitted via the transmission line LA, preferably in destination of the DSLAM.sub.A. The DSLAM.sub.A (or another item of equipment of the Internet access provider of the subscriber A) may also poll the modem-router MR′ by periodically transmitting thereto presence requests (“are you present?”). While the modem-router MR′ responds to the presence requests, the DSLAM.sub.A deduces that the modem-router MR′ is indeed connected to the internal handler of the dwelling of the subscriber A. And, in the absence of response, the DSLAM.sub.A deduces that the modem-router MR′ is disconnected from the internal handler of the dwelling of the subscriber A. In another alternative embodiment, it is the modem-router MR′ that periodically transmits to the DSLAM.sub.A (or to another item of equipment of the Internet access provider of the subscriber A) presence messages (“I am present”). While the DSLAM.sub.A receives the presence messages, it deduces that the modem-router MR′ is indeed connected to the internal handler of the dwelling of the subscriber A. And in the absence of receipt of the presence messages, the DSLAM.sub.A deduces that the modem-router MR′ is disconnected from the internal handler.
(45) Step 11: When the Internet access provider of the subscriber A is informed of the disconnection of the modem-router MR′, it generates and transmits to the Internet access provider of the subscriber B, a session closure signal. The receipt of the disconnection signal is the element triggering the generation and the transmission of the session closure signal. In
(46) Step 12: When the Internet access provider of the subscriber A is informed of the disconnection of the modem-router MR′, it generates and transmits to the multiplexer MUX (R.sub.MUX, SR.sub.MUXA or DSLAM.sub.MUXA), a control signal in order to stop the multiplexing of the transmission line LA of the subscriber A, so that only the numerical data associated with the connection parameters of the subscriber A pass through the transmission line LA. The receipt of the session closure signal is the element triggering the generation and the transmission of the stop control signal. In
(47) In response to the receipt of the session authorization signal (Step 8), the modem-router MR′ may generate and transmit a session electronic signature to the Internet access provider of the subscriber B and/or to the Internet access provider of the subscriber A, and more specifically to the DSLAM.sub.B and/or to the DSLAM.sub.A. Such session electronic signature may notably include the following numerical data: unique identifier (for example, IMSI) of the subscriber B, date, time, IP address of the modem-router MR′. Such session electronic signature makes it possible to track the connection histories of the subscriber B when he uses the modem-router MR′ from the internal handler of the dwelling of the subscriber A.
(48) In accordance with the invention, the terminating point P.sub.A is likely to simultaneously receive the numerical data associated with the connection parameters of the subscriber B and the numerical data associated with the connection parameters of the subscriber A.
(49)
(50)
(51)
(52) By referring to
(53) The network interface 52A is a wired or wireless communication interface adapted to establish a communication with the items of equipment E.sub.A of the subscriber A, by using, for example, the private security key associated with the connection parameters of the subscriber A. And the network interface 52B is a wired or wireless communication interface adapted to establish a communication with the items of equipment E.sub.B of the subscriber B, by using, for example, the private security key associated with the connection parameters of the subscriber B. Such network interfaces 52A, 52B are similar to the network interface 52 described previously in reference to
(54) In this embodiment, the modem-router MR′ further comprises a connection interface 54 for smart card, SIM card, or USB stick. This connection interface 54 is thus adapted to receive a secure removable media device 540 wherein are saved numerical data. In practice, these numerical data contain the connection parameters of the subscriber B or at least identification data of the account of the subscriber B, and notably his subscriber unique identifier. The Internet access provider of the subscriber B may provide the latter with the secure removable media device 540 pre-parametrized. The subscriber B may also parametrize himself the media device 540, prior to his installation in the dwelling of the subscriber A. The subscriber B thus simply needs to transport the secure removable media device 540, the overall size of which is smaller than same of the modem-router MR′, the removable media device 540 being sufficient to recognize the subscriber B.
(55) The modem-router MR′ here is parametrized beforehand with the connection parameters of the Internet network access account of the subscriber A and notably with the following numerical data: unique identifier of the subscriber A, identification data of the Internet access provider of the subscriber A, private security key, optionally certain rights and/or restrictions open to the subscriber A, etc. Such parametrization is performed as described previously. The subscriber A may, for example, use a computer or a Smartphone that he connects to the modem-router MR′. The computer or the Smartphone acts as interface so that the subscriber A enters his connection parameters manually. The subscriber A connects in a wired (for example, with an Ethernet cable) or wireless (for example, by Wi-Fi) manner the modem-router MR′ to his native modem-router MR.sub.A. In response to this connection, or in response to the activation of a dedicated key installed on the box of the modem-router MR′, all of the connection parameters saved in the native modem-router MR.sub.A are copied in the memory 51 of the modem-router MR′. The connection parameters may also be saved in a secure removable media device made available for the subscriber A.
(56) The modem-router MR′ is connected directly to the internal handler of the dwelling of the subscriber A, in the same way as the native modem-router MR.sub.A.
(57)
(58) Event 1: The modem-router MR′ is parametrized with the connection parameters of the Internet network access account of the subscriber A.
(59) Step 2: Connection of the modem-router MR′ to the terminating point P.sub.A. This Step 2 may be implemented before or after Event EV1.
(60) Event 20: The secure removable media device 540 is inserted into the connection interface 54.
(61) Step 3: The modem-router MR′ generates and transmits an authentication request to the Internet access provider of the subscriber A. The insertion of the secure removable media device 540 into the connection interface 54 is the element triggering the generation and the transmission of the authentication request. This step is identical to Step 3 described in reference to
(62) Step 4: The Internet access provider of the subscriber A generates and transmits to the Internet access provider of the subscriber B, a polling request. This step is identical to Step 4 described in reference to
(63) Step 5: The Internet access provider of the subscriber B verifies that the subscriber B is indeed affiliated therewith and, after verification, generates and transmits to the Internet access provider of the subscriber A an authorization signal. This step is identical to Step 5 described in reference to
(64) Event 6: In response to the receipt of the authorization signal, the Internet access provider of the subscriber A opens the access rights to the subscriber B. This event is identical to Event 6 described in reference to
(65) Step 7: The Internet access provider of the subscriber A generates and transmits to the multiplexer MUX (R.sub.MUX, SR.sub.MUXA or DSLAM.sub.MUXA), a control signal in order to multiplex the transmission line LA of the subscriber A. This step is identical to Step 7 described in reference to
(66) Step 8: The Internet access provider of the subscriber A generates and transmits to the modem-router MR′, a session authorization signal. This step is identical to Step 8 described in reference to
(67) Event 80: In response to the receipt of an authorization signal containing the data relating to the connection parameters of the subscriber B, the modem-router MR′ is automatically parametrized with the connection parameters of the Internet network access account of the subscriber B.
(68) Step 9: The item or items of equipment E.sub.B of the subscriber B can now connect to the modem-router MR′, via a wired or wireless connection and navigate on the Internet with the connection parameters of the subscriber B. The wired or wireless connection is established via the interface 52B reserved for the subscriber B, with the private security key associated with the connection parameters of the subscriber B. Similarly, the subscriber A will be able to continue connecting his item or items of equipment E.sub.A to the modem-router MR′, via a wired or wireless connection and navigate on the Internet with the connection parameters of the subscriber A. The wired or wireless connection is established via the interface 52A reserved for the subscriber A, with the private security key associated with the connection parameters of the subscriber A. This step is identical to Step 9 described in reference to
(69) Step 10: When the secure removable media device 540 is withdrawn from the connection interface 54, a disconnection signal is transmitted to the Internet access provider of the subscriber A. The withdrawal of the secure removable media device 540 is therefore the element triggering the generation and the transmission of the disconnection signal. The modem-router MR′ may, for example, emit such disconnection signal. The generation and the transmission of the disconnection signal are identical to same described in reference to Step 10 in
(70) Step 11: When the Internet access provider of the subscriber A is informed of the disconnection of the modem-router MR′, it generates and transmits to the Internet access provider of the subscriber B, a session closure signal. This step is identical to Step 11 described in reference to
(71) Step 12: When the Internet access provider of the subscriber A is informed of the disconnection of the modem-router MR′, it generates and transmits to the multiplexer MUX (R.sub.MUX, SR.sub.MUXA or DSLAM.sub.MUXA), a control signal in order to stop the multiplexing of the transmission line LA of the subscriber A. This step is identical to Step 12 described in reference to
(72) In reference to
(73) The preceding description makes reference to subscribers A and B each having a different Internet access provider. Nevertheless, the invention also applies to the case where the subscribers A and B have the same Internet access provider. In this hypothesis, the DSLAM.sub.A and DSLAM.sub.B belong to such common provider and are generally located in MDFs that are distinct and remote from one another.
(74) The arrangement of the various elements and/or means and/or steps of the invention, in the embodiments described hereinabove, must not be understood as requiring such an arrangement in all of the implementations. In any case, it will be understood that various modifications can be made to such elements and/or means and/or steps, without deviating from the spirit and scope of the invention.