Reverse Internet Protocol Lookup

Not applicable.

Not applicable.

Not applicable.

1. Field of the Invention

This invention relates to a system and method for identifying a user on the Internet without entering a password or the like.

2. Discussion of Related Art

It is known in the art that when a user tries to access a web site or other systems, the only identification provided by the user is the user's Internet Protocol (IP) address. Typically, a web site or other system cannot identify who the user actually is based upon the Internet Protocol address alone. In order to identify the user, the web site or system uses a separate identification method to identify the user. A common method is to have the user enter a unique password or identification number that is assigned to the user by the web site. If the password or identification number is correctly entered, then the individual user has been identified.

One disadvantage of such a system is that the user needs to memorize and enter separate passwords and identification numbers in order to gain access to one or more web sites or systems. One attempt to overcome this problem is to use known password management systems that store the multiple passwords on a personal computer. Such password management systems hinder the user from using multiple personal computers, since the passwords needed may be stored on a machine that is not currently being used.

Another disadvantage of such a system is that the user or customer is often required to enter user related information at each web site or system that he or she attempts to access.

One aspect of the present invention regards a telecommunications system that includes a network with an authentication system that is connected to the network and a dynamic address generator that generates a unique dynamic address associated with the user of the network for the period of time upon which the user first gains access to the network to the time the user signs off of the network. An external system is connected to the network so that the unique dynamic address associated with the user is relayed to the external system when the user attempts to gain access to the external system from the network, the unique dynamic address allows the user to gain access to the external system without entering a password associated with the external system.

A second aspect of the present invention regards a method of accessing an external system from a network without entering a password to enter the external system. The method includes the steps of a user gaining access to a network and creating a unique dynamic address associated with the user for the period of time upon which the user first gains access to the network to the time the user signs off of the network. The user attempts to gain access to an external system connected to the network. Relaying the unique dynamic address to the external system and the user gains access to the external system based on the unique dynamic address and without entering a password associated with the external system.

A third aspect of the present invention regards a telecommunications system that includes a network, an authentication system connected to the network that has a dynamic address generator that generates a unique dynamic address associated with the user for the period of time upon which the user first gains access to the network to the time the user signs off of the network. An external system is connected to the network so that the unique dynamic address associated with the user is relayed to the external system when the user attempts to gain access to the external system from the network. A data storage and transfer system connected to said external system and includes a memory with a database of sessions data regarding users of the external system. The external system queries the data storage and transfer system and requests a session record lookup based upon the dynamic address.

Another aspect of the present invention regards a method of accessing an external system from a network by having a user gain access to a network and creating a unique dynamic address associated with the user for the period of time upon which the user first gains access to the network to the time the user signs off of the network. The user attempts to gain access to the external system connected to the network. The unique dynamic address is relayed to the external system and the user gains access to the external system based on the unique dynamic address. A data storage and transfer system is queried and a session record lookup is requested based upon the dynamic address.

Each of the first two aspects of the present invention provides the advantage that the user only needs to memorize a single password or identification number in order to gain access to a plurality of web sites or systems.

Each of the first two aspects of the present invention provides the advantage that the user can gain access to a plurality of web sites or systems by using a single password or identification number independent of whatever personal computer or browsing device that the user happens to be using.

Each of the first two aspects of the present invention provides the additional advantage that user or customer related information is retrieved by a web site or system without the need for the user or customer to enter the information at the time of entering the web site or system.

The last two aspects of the present invention provide the advantage that information regarding a user or customer can be readily accessed and used to customize the services offered to the user or customer.

The foregoing features and advantages of the present invention will be further understood upon consideration of the following detailed description of the invention taken in conjunction with the accompanying drawings, in which:

FIG. 1 schematically shows an embodiment of a telecommunications system according to the present invention; and

FIG. 2 schematically shows an embodiment of an authentication system to be used with the telecommunications system of FIG. 1.

Referring now to the drawings wherein like reference characters designate identical or corresponding parts throughout the several figures, and in particular FIGS. 1-2 show a telecommunications system 10 that includes a network 12 electronically connected to a data storage and transfer system 14, such as a web site, e-mail or a customer management and billing system. A user gains entry to the network 12 by entering a password or an identification number into a data entry device 16 that is electronically connected to the network 12. An example of a data entry device 16 is a keyboard 18 and a personal computer 20. The user gains access to the network 12 by dialing the network 12 up on the data entry device 16, via plain old telephone service (POTS) lines 22, a point of presence (POP) 24 using a Point-to-Point Protocol (PPP) dial up client software, such as "Dial-Up Networking" software available from Microsoft Windows 95. The software establishes a modem connection with the point of presence 24 and requests authentication of the user to use the network 12 via a certain protocol, such as a standard Challenge-Handshake Authentication Protocol (CHAP), a Password Authentication Protocol (PAP) or a "scripted terminal" protocol, to a dial-up point of presence (POP) 24. As shown in FIG. 1, the point of presence 24 sends the authentication request to an authentication server 26 using a protocol that is a modified as such publicly available servers as the Tacacs+ server or the Cisco Tacacs+ server that use the standard Tacacs protocol. The authentication server 26 is modified at the interface with the data storage and transfer system 14 so that the authentication server 26 is able to work with the data storage and transfer system 14. In addition, the authentication server 26 and the point of presence 24 are configured so as to function as a dynamic address generator that generates a unique dynamic Internet Protocol address, assign the generated dynamic Internet Protocol address to the user and then send the dynamic Internet Protocol address assigned to the user to the data storage and transfer system 14 as explained below.

As schematically shown in FIG. 2, the authentication server 26 includes an authentication system 28 that receives the authentication request and sends the request to a comparator 30. The comparator 30 compares the identity of the user with two or more databases of users (such as corporate users and individual users) stored in the memory 32. If the user is, for example, a corporate user, then the authentication request goes directly to the data storage and transfer system 14 without a dynamic address attached thereto and the validity of the entered password is compared with a database of passwords for gaining access to the network 12 that have been previously stored in the data storage and transfer system 14. Access to the network 12 is allowed to the corporate user if the entered password is valid. Access to the network 12 is refused to the corporate user if the password is invalid.

If the user is, for example, an individual, then the authentication server 26 will contact the data storage and transfer system 14 to see if the entered password is valid. If it is not, access to the network 12 is denied. If the password is valid, then the data storage and transfer system 14 contacts the point of presence 24 via authentication server 26. Next, one of the available Internet Protocol addresses stored at the point of presence 24 is selected and assigned to the user. At this stage, the authentication server 26 sends both the user's entered password and his or her assigned dynamic address to the data storage and transfer system 14.

Once the data storage and transfer system 14 receives the entered password and the assigned dynamic address, the data storage and transfer system 14 stores the assigned dynamic address within the session data base memory 38. In addition, the data storage and transfer system 14 creates and stores a session record for the user by storing the user's dynamic address with the session record look-up associated with the user that is stored in the session database memory 38. Note that the session database memory 38 may be part of the data storage and transfer system 14.

The use of a session record allows one or more external systems or programs 40, such as a web server, an e-commerce transaction system, a customized start page or an e-mail subsystem, to determine the identity of a user that is attempting access to the external system 40. When the user attempts to access the external system 40, the user's dynamic address is relayed to the external system 40 which in turn queries the data storage and transfer system 14 and requests a session record lookup from the session database memory 38 based upon the received dynamic address. In response to the request, the data storage and transfer system 14 directs the sessions database memory 38 to relay to the external system or program 40 the user's session information and the user's account identifier stored with the data storage and transfer system 14. Based on the return sessions information and the account identifier associated with the user, the external system or program 40 can now determine whether the user is allowed access to the external system 40. Thus, the unique dynamic address allows the user to gain access to the external system 40 without entering a password associated with the external system 40. Once the user is allowed access to the external system 40, the external system 40 can make further queries with the data storage and transfer system 14 to retrieve more information, such as customer records and accounts, that are stored in the sessions database memory 38 and are associated with the user with the unique dynamic address. This allows the operators of the external system 40 not only to determine whether or not the user associated with the dynamic address is a customer of the external system's service or some other entity, but also to retrieve the user's customer information from the session database memory 38 and use that information to possibly present the external system 40 differently to the user or allow/disallow certain features or functionality in the external system 40 based on the user's profile.

Once the user signs off of the network 12, the dynamic address is taken out of the session database memory 38, returned to the authentication server 26 and returned to the point of presence 24 where it is stored to be used by another user. Thus, the dynamic address is unique in that it exists only for a single session, the period of time upon which the user first gains access to the network 12 to the time the user signs off of the network 12.

The foregoing description is provided to illustrate the invention, and is not to be construed as a limitation. Numerous additions, substitutions and other changes can be made to the invention without departing from its scope as set forth in the appended claims. For example, the present invention can be used for a variety of different uses, including: electronic commerce transactions, subscription based services and personalization of services or web site price plan flexibility.