Method for the temporary allocation of terminals and users in a private virtual network

[0002] The invention relates to a method and a device for temporarily allocating terminals and users in a virtual private network.

[0003] The invention relates to a method as claimed in patent claim 1 and a device as claimed in patent claim 7.

[0004] The basic principle of virtual private networks is already known from ‘Ambrosch, Maher, Sasscer (Eds.) “The Intelligent Network”, Chapter 11: PVN Service Description’.

[0005] The resources of the already existing public communications network are used to provide a user with the possibility of setting up an enclosed network. This can be expressed in the form of a private branch exchange by making available services of this kind. This is particularly advantageous for subscribers who are located far apart from one another.

[0006] An important feature of this VPN is the private numbering plan. This means that each subscriber in this VPN has their own VPN-internal call number which is as a rule structured in a standardized way in the VPN (in that, for example, it is not necessary to know an area code) and is significantly shorter than the “physical” number of this terminal. For this to function, all the information on the composition of the VPN must be stored at a central point so that the correct destination subscriber can be determined when there is a call.

[0007] In this context, individual call numbers are always allocated to the same physical device. However, in many cases it is desirable if a device can be loaned without the tolls being charged to the registered owner of this device and without the user who is loaning the device erroneously receiving the owner's calls. In particular mobile phones whose popularity is ever-increasing, are often acquired for an entire department so that these devices are often transferred to the colleague who needs the device most urgently at a particular time. However, the subscriber can be accessed only by the small circle of people who know that he is carrying a mobile phone with him at that particular time and who also know the number of the device. This problem can, however, be avoided by means of a call divert if the device which is normally used by the subscriber has this performance feature.

[0008] A further problem occurs if the device has only a restricted functionality owing to the registered rights of a user in the VPN, for example the limiting of long distance calls.

[0009] The object of the invention is to simplify substantially the transfer of communications terminals to other users.

[0010] This object is achieved by means of a method in which a use profile can be defined for each subscriber in a VPN. The object is achieved by means of a device which enables user profiles to be defined and stored and which permits user profiles and terminals to be allocated.

[0011] As soon as a subscriber of a VPN (for example employees of a company) wishes to use a terminal from the common pool of devices, for example a specific device such as a multi-mode mobile phone, his personal user profile is allocated to this device in a database provided for this purpose, and said subscriber can use the device. As soon as said subscriber returns the device to the pool, he deactivates his user profile again by deleting the allocation of his profile and of the terminal again.

[0012] This procedure results in a number of advantages. A call divert to the respective device can be controlled centrally by means of the VPN, and there is no longer any dependence on the presence of the “call divert” performance feature. The accessibility of the subscriber can thus be improved substantially. The calling party selects the number which is already known to him, and it is determined in the database of user profiles whether at that particular time a subscriber has activated a user profile on a particular device, is carrying said device with him, and transfers the call there.

[0013] Because the existing devices are as a rule not continuously in use, they can be returned to a common pool so that any person who requires such a device at short notice can also be provided with one easily.

[0014] Limitations on the range of functions, for example the restriction to domestic calls, are not defined with respect to a device but can instead be tailored to the respective user.

[0015] It is also, for example, conceivable for the pool of common devices to contain different types of devices which are selected depending on the requirements. It may therefore be appropriate to define for one subscriber a plurality of user profiles which can then be selected and activated as a function of the type of device.

[0016] If a device is lost, the damage can be minimized if it can be disabled to prevent further use at least in the VPN by deactivating the user profile.

[0017] The range of functions of the terminal can be defined by the entries into a user profile. The range of the terminal can be defined by creating an “authorized” or “prohibited” list. In the former case, the user may dial only the expressly enabled numbers or ranges of numbers (for example area code, country code, only within the VPN), and in the latter case he cannot dial precisely those numbers or ranges of numbers.

[0018] A further feature of the user profile may be the operating time of the device. Hours or days are enabled or disabled, and the terminal is thus, for example, disabled for use for private purposes at the weekend.

[0019] The user profile can be activated for a terminal in different ways. One possible way is to allocate the user profile to a terminal in a database by means of a central administrator (which is as a rule not present in a VPN). This has the advantage that misuse is avoided, but on the other hand it is extremely costly in terms of personnel, in particular if the loan times are only very short (that is to say on a daily or hourly basis). The alternative to this would be for each subscriber to be able to activate his user profile himself, for example by calling a special service number and entering a PIN from the selected terminal, or by making a call from any terminal to the central administration system in order to carry out a menu-prompted amendment of the entries in the administering database. This is a more flexible possibility, but requires the user to be reliable and to have a relatively wide range of knowledge.

[0020] A substantial advantage of the procedure according to the invention is the resulting correct billing. This means that only the person who has actually used the terminal pays. At the same time, the subscriber who is to be billed may not be the user of the device, for example if the pool of devices is in a company and the billing is to be reassigned to the different areas of the organization.

[0021] In addition, it is conceivable for individual subscribers or groups of subscribers to have agreed a special billing system with the service provider, for example a type of “frequent use discount”.

[0022] The invention will be explained in more detail below with reference to exemplary embodiments. Here,

[0023] FIG. 1, shows a telecommunications network with a subnetwork VPN, subscribers TN in this subnetwork, conventional communications terminals KE and special devices ME in a pool of devices and

[0024] FIG. 2, shows an arrangement by means of which user profiles can be stored and allocated to specific terminals.

[0025] FIG. 1 shows by way of example the structure of a telecommunications network with a subnetwork VPN containing three subscribers TNA, TNB, TNC. These subscribers each have a fixed assess to the telecommunications network via conventional telecommunications terminals KEA, KEB, KEC. In addition, there are also three special devices MEX, MEY and MEZ in this VPN. Said special devices are temporarily allocated to the different subscribers as users. Here, a subscriber can use different devices (for example with different use profiles) or a device can be used by different subscribers.

[0026] FIG. 2 shows a way of implementing the device for storing and allocating user profiles in an intelligent network IN. This is an architecture for providing services in a communications network, in particular, a virtual private network can also be implemented by means of IN.

[0027] The subscribers KE in this network are connected to the communications network via service switching points SSP or even extensions NSSP. A central entity SCP is responsible for the correct recognition and forwarding of connection wishes within the network, in particular the implementation of the private numbering plan of the VPN. This information is stored in a database BSDB which can be interrogated by the SCP at any time and amended by a central administration system SMS. This structure can then be used to define and store the user profiles in the database BSDB or in an additional database. The profiles can be amended by the administration system, the profiles are also allocated to the terminals KE by means of the administration system or by means of the subscriber via the SCP.

[0028] During the connection setup, the service switching point is interrogated at the SCP. It is clarified whether the terminal used by the calling subscriber is allocated to a valid user profile. In addition it is tested whether the number dialed by the subscriber is not excluded by the user profile. Before the connection can be switched through successfully, it is necessary also to ensure whether the connection request can be forwarded to the device which has actually been physically dialed, and whether the destination call number is a number from the private numbering plan of the VPN, or whether the destination subscriber is using one of the terminals from the common pool of devices at that particular time.

[0029] W. D. Ambrosch, A. Maher, B. Sasscer (Eds.) The Intelligent Network,A

[0030] Joint Study by Bell Atlantic, IBM and Siemens, Springer Verlag [publishing house] Berlin Heidelberg 1989

[0031] BSDB Business Service Database

[0032] CCS7 Common Channel Signaling System No. 7

[0033] IN Intelligent Network

[0034] KE Communications terminal

[0035] ME Mobile terminal

[0036] PVN Private Virtual Network (see also VPN)

[0037] SCP Service Control Point

[0038] SMP Service Management Point

[0039] SSP Service Switching Point

[0040] TN Subscriber

[0041] VPN Virtual Private Network (see also PVN)