System and method for authorizing and validating user agents based on user agent location

Patent metadata

Field	Value
Publication number	US-9948658-B2
Application number	US-201615332672-A
Country	US
Kind code	B2
Filing date	Oct 24, 2016
Priority date	Mar 25, 2008
Publication date	Apr 17, 2018
Grant date	Apr 17, 2018

Abstract

An embodiment of a method includes receiving a request from a user agent to use a communication network, determining that the user agent is not recognized on the communication network, and requiring submission of location information prior to allowing the user agent to use the network. An embodiment of a system includes a recognition module configured to determine whether the communication device is recognized in response to a request to use a communication network from the communication device, a notification module configured to notify the communication device that the communication device is not recognized, wherein notification that the communication device is not recognized indicates that location information must be submitted prior to the communication device using the communication network; and a location update module configured to receive submitted location information and update the location of the communication device based on the location information.

First claim

What is claimed is:

1. A method comprising:
receiving a request at a registration server from a user agent to use a communication network, the registration server comprising at least one processor, wherein the request identifies the user agent;
determining that the user agent is not recognized on the communication network, wherein the determining step comprises:
determining that no valid authorization credentials exist that correspond to the user agent;

requiring, in response to determining that the user agent is not recognized on the communication network, submission of location information by the user agent prior to allowing the user agent to use the network;
receiving the location information from an authorization server, wherein the location information is submitted to the authorization server from the user agent;
receiving, by the registration server, authorization credentials from the authorization server, wherein the receiving authorization credentials step comprises:
receiving authorization credentials that were generated in response to the user agent submitting the location information;

receiving another request to use the network from the user agent; and
determining that the user agent is recognized based at least in part on the authorization credentials.

2. The method as recited in claim 1 , wherein the location information is entered manually by a user of the user agent.

3. The method as recited in claim 1 , wherein the location information is automatically determined and submitted by the user agent.

4. The method as recited in claim 1 further comprising invalidating the authorization credentials after a timeout time expires if the user agent does not register again within the timeout time.

5. The method as recited in claim 4 , further comprising setting the timeout time by a registrar.

6. The method as recited in claim 5 , further comprising:
notifying the user agent of the timeout time by the registrar; and
storing the timeout time by the user agent.

7. The method as recited in claim 1 , further comprising notifying the user agent that the user agent is not recognized by sending an authentication failure message to the user agent.

8. The method as recited in claim 1 , wherein the request to use the communication network comprises a request to register on the communication network.

9. A registration server comprising:
at least one processor;
memory, operatively connected to the at least one processor and storing instructions that, when executed by the at least one processor, cause the registration server to perform a method, the method comprising:
receiving a request from a user agent to use a communication network wherein the request identifies the user agent;
determining that the user agent is not recognized on the communication network, wherein the determining step comprises:
determining that no valid authorization credentials exist that correspond to the user agent;

requiring, in response to determining that the user agent is not recognized on the communication network, submission of location information by the user agent prior to allowing the user agent to use the network;
receiving the location information from an authorization server, wherein the location information is submitted to the authorization server from the user agent;
receiving authorization credentials from the authorization server, wherein the receiving authorization credentials step comprises:
receiving authorization credentials that were generated in response to the user agent submitting the location information;

receiving another request to use the network from the user agent; and
determining that the user agent is recognized based at least in part on the authorization credentials.

10. The registration server as recited in claim 9 , wherein the location information is entered manually by a user of the user agent.

11. The registration server as recited in claim 9 , wherein the location information is automatically determined and submitted by the user agent.

12. The registration server as recited in claim 9 , the method further comprising invalidating the authorization credentials after a timeout time expires if the user agent does not register again within the timeout time.

13. The registration server as recited in claim 12 , the method further comprising setting the timeout time by a registrar.

14. The registration server as recited in claim 13 , the method further comprising:
notifying the user agent of the timeout time by the registrar; and
storing the timeout time by the user agent.

15. The registration server as recited in claim 9 , the method further comprising notifying the user agent that the user agent is not recognized by sending an authentication failure message to the user agent.

16. The registration server as recited in claim 9 , wherein the request to use the communication network comprises a request to register on the communication network.

Assignees

• Level 3 Communications Llc

Inventors

• Malas Daryl

Classifications

• H04L63/107 Primary

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F2221/2129

  Authenticate client device independently of the user · CPC title