US6088451A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security system and method for network element access
Assignee: Verizon Patent and Licensing Inc
•
Filing: 1996-06-28
•
Granted: 2000-07-11
•
Expires: 2016-06-28
Abstract
Abstract A system and method for securing access to network elements by user elements, wherein the network elements and the user elements are coupled to a network. A network security server coupled to the network, wherein the network security server provides network security mechanisms to control access to the network elements and protect network resources and information. The network security mechanisms include: an authentication server responsible for authentication of the network users to network elements, a credential server responsible for controlling the network user credentials or privileges, and a network element access server responsible for controlling of access to the network elements by the user elements. A registration database facilitates administration and management of access to the network by the user elements. The registration database stores user profiles and administrative information to enhance effectiveness of the network security mechanisms. Each of the user elements and the network elements includes a separate local access control means as an interface that is provided at each user element and operates in conjunction with the authentication server, the credential server, and the network element access server to facilitate secure communication of data over the network.
Inventors
- 👤 Jingsha He
- 👤 Randle D. Hall
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 14:24
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0807; H04L63/20
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
202 words
A system for securing access to network elements by user elements, wherein the network elements and the user elements are coupled to a network, the system comprising: a network security server coupled to the network, wherein said network security server provides security mechanisms to control access to the network elements and protect network resources and information, wherein said security mechanisms comprise: an authentication server that prepares a response message responsible for authentication of the network users to network elements; a credential server responsible for controlling the network user credentials or privileges; a network element access server responsible for controlling of access to the network elements by the user elements, wherein access to the network by the user is based upon verification of a combination of the credentials; and a registration database to facilitate administration and management of access to the network by the user elements, wherein said registration database stores user identifiers, a list of user credentials, user passwords and administrative information to enhance effectiveness of said security mechanisms; wherein each of the user elements and the network elements includes a separate local access control means operating in conjunction with said security mechanisms to facilitate secure communication of data over the network.
Claim 2
Independent Claim
202 words
A system for securing access to network elements by user elements, wherein the network elements and the user elements are coupled to a network, the system comprising: a network security server coupled to the network, wherein said network security server provides security mechanisms to control access to the network elements and protect network resources and information, wherein said security mechanisms comprise: an authentication server that prepares a response message responsible for authentication of the network users to network elements; a credential server responsible for controlling the network user credentials or privileges; a network element access server responsible for controlling of access to the network elements by the user elements, wherein access to the network by the user is based upon verification of a combination of the credentials; and a registration database to facilitate administration and management of access to the network by the user elements, wherein said registration database stores user identifiers, a list of user credentials, user passwords and administrative information to enhance effectiveness of said security mechanisms; wherein each of the user elements and the network elements includes a separate local access control means operating in conjunction with said security mechanisms to facilitate secure communication of data over the network.
Claim 3
Dependent Claim
41 words
The system of claim 1, wherein the network security server issues a general ticket to each user element at log in, wherein said general ticket is used by the network security server for authentication of access requests by the user elements.
Claim 4
Dependent Claim
80 words
The system of claim 2, wherein one of said security mechanisms includes first means for providing a session ticket to a requesting element in response to a network element access request to access any resource or information in a selected element, wherein said requesting element and said selected element can be one of the user or network elements, and said session ticket includes information that has to be present for all communication between said requesting element and said selected element.
Claim 5
Dependent Claim
95 words
The system of claim 2, wherein one of said security mechanisms includes second means for providing a unique session key to a requesting element in response to a network element access request to access any resource or information in a selected element, wherein said requesting element and said selected element can be one of the user or network elements, and said unique session key is used by said local access control means associated with said requesting element and said selected element for encryption and decryption of communications between said requesting element and said selected element.
Claim 6
Dependent Claim
97 words
The system of claim 3, wherein one of said security mechanisms includes second means for providing a unique session key to a requesting element in response to a network element access requests to access any resource or information in a selected element, wherein said requesting element and said selected element can be one of the user or network elements, and said unique session key is used by said local access control means associated with each of said requesting element and said selected element for encryption and decryption of communications between said requesting element and said selected element.
Claim 7
Dependent Claim
39 words
The system of claim 4, wherein said local access control means associated with each of said requesting element and said selected element uses integrity checksums to ensure integrity of data communicated between said requesting element and said selected element.
Claim 8
Dependent Claim
53 words
The system of claim 2, wherein the network includes at least one logical partition creating a plurality of realms, each of said plurality of realms includes its own network security server, and said network security servers associated with said plurality of realms include inter-realm authentication means for communication between said plurality of realms.
Claim 9
Dependent Claim
19 words
The system of claim 7, wherein said security servers associated with said plurality of realms share said registration database.
Claim 10
Dependent Claim
54 words
The system of claim 2, further comprising a dial-up server to permit dial-up users access to the network elements through the network, wherein said dial-up server supports a network communication protocol to connect the dial-up users to the network and a dial-up access protocol to connect the dial-up users to a dial-up access network.
Claim 11
Independent Claim
199 words
A method for providing security of access to network elements by user elements and protect network resources and information, wherein the network and user elements are coupled to a network including a network security server, the method comprising the steps of: providing authentication of users to the network elements using an authentication server that prepares a response message associated with the network security server; managing network user credentials or privileges using a credential server associated with the authentication server; controlling access to the network elements by the user elements using a network element access server associated with the authentication server and the credential server, wherein access to the network by the user is based upon verification of a combination of the credentials; storing user identifiers, a list of user credentials, user passwords and administrative information in a registration database associated with the network security server, to facilitate administration and management of access to the network elements by the user elements; and providing a separate local access control means for each user element and each network element, wherein each local access control means operates in conjunction with the network security server to facilitate secure communication of data over the network.
Claim 12
Independent Claim
199 words
A method for providing security of access to network elements by user elements and protect network resources and information, wherein the network and user elements are coupled to a network including a network security server, the method comprising the steps of: providing authentication of users to the network elements using an authentication server that prepares a response message associated with the network security server; managing network user credentials or privileges using a credential server associated with the authentication server; controlling access to the network elements by the user elements using a network element access server associated with the authentication server and the credential server, wherein access to the network by the user is based upon verification of a combination of the credentials; storing user identifiers, a list of user credentials, user passwords and administrative information in a registration database associated with the network security server, to facilitate administration and management of access to the network elements by the user elements; and providing a separate local access control means for each user element and each network element, wherein each local access control means operates in conjunction with the network security server to facilitate secure communication of data over the network.
Claim 13
Dependent Claim
41 words
The method of claim 10, further comprising the step of issuing a general ticket to each user element at log in, wherein said general ticket is used by the network security server for authentication of access requests by the user elements.
Claim 14
Dependent Claim
75 words
The method of claim 11, further comprising the step of: providing a session ticket to a requesting element in response to a network element access request to access any resource or information in a selected element, wherein said requesting element and said selected element can be one of the user or network elements, and said session ticket includes information that has to be present for all communication between said requesting element and said selected element.
Claim 15
Dependent Claim
20 words
The method of claim 12, wherein said step of providing a session ticket is performed by the network security server.
Claim 16
Dependent Claim
54 words
The method of claim 11, further comprising the step of providing a unique session key to a requesting element in response to a network element access request to access any resource or information in a selected element, wherein said requesting element and said selected element can be one of the user or network elements.
Claim 17
Dependent Claim
29 words
The method of claim 14, further comprising the step of using said unique session key for encryption and decryption of communications between said requesting element and said selected element.
Claim 18
Dependent Claim
30 words
The method of claim 15, further comprising the step of performing said encryption and decryption using said local access control means associated with said requesting element and said selected element.
Claim 19
Dependent Claim
27 words
The method of claim 16, further comprising the step of using integrity checksums to ensure integrity of data communicated between said requesting element and said selected element.
Claim 20
Dependent Claim
24 words
The method of claim 16, further comprising the step of using integrity checksums to verify communications between said requesting element and said selected element.
Claim 21
Dependent Claim
46 words
The method of claim 11, further comprising the step of logically partitioning the network to create at least two separate realms, providing each realm with its own network security server and an inter-realm authentication means for communication with another of said at least two separate realms.
Claim 22
Dependent Claim
22 words
The method of claim 19, further comprising the step of permitting said at least two separate realms to share said registration database.
Claim 23
Dependent Claim
61 words
The method of claim 11, further comprising the step of: including a dial-up server a dial-up server to permit dial-up users access to the network elements through the network, wherein said dial-up server supports a network communication protocol to connect the dial-up users to the network and a dial-up access protocol to connect the dial-up users to a dial-up access network.
References Cited (Backward Citations)
US5228083A
Cited
US5590199A
Cited
US5455953A
Cited
US5495533A
Cited
US5535276A
Cited
US5815574A
Cited
US5742762A
Cited
US5764887A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-07-11 | 2004-01-10 | 2004-07-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-07-11 | 2008-01-10 | 2008-07-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-07-11 | 2012-01-10 | 2012-07-11 | $7700.00 | Window Closed / Lapsed |