Ipass Inc.

Jeff Steven Edgett

Singam Sunder

Roy David Albert

James Marion Underwood

Barbara Nelson

Blair Thomas Bullock

John Robert Vollbrecht

Alla Rozenfeld

Jay Farhat

Can Vu

A method includes sending a faked authentication request from a client device wherein the faked authentication request includes identification credentials. A faked authentication request indicates that a reply message in response to the faked authentication request is to include data for updating a directory on the client device. A reply message is received at the client device in response to the faked authentication request. The reply message includes data for updating the directory. The directory is updated based, at least in part, on the data for updating the directory.

Method and system of providing access point data associated with a network access point

A method of, and system for, changing encryption information in a computer network is provided. The method includes providing at least first cryptographic information and second cryptographic information. A first validity period is provided for the first cryptographic information and a second validity period is provided for the second cryptographic information wherein the first and second validity periods overlap.

Method and system for changing security information in a computer network

A system and method is provided to verify configuration of a client access device requesting access to a network by establishing a communications link between a network access system and the client access device to authenticate and authorize the client access device and a user associated with the client access device. The network access system further receives client device configuration data from the client access device over the communications link during an authentication and authorization exchange and processes the client device configuration data to determine if the client access device will be granted access to the network.

Method and system for verifying and updating the configuration of an access device during authentication

A method is provided to securely authenticate user credentials. The method includes encrypting a user credential with a public key at an access device wherein the public key is part of a public/private key pair suitable for use with an encryption algorithm. The encrypted network user credential is transmitted from the access device to a decryption server where it is decrypted with a private key, the private key being part of the public/private key pair suitable for use with the encryption algorithm. The decrypted user credential is then transmitted from the decryption server to an authentication server for verification. The decryption server typically forms part of a multi-party service access environment including a plurality of access providers, the method including decrypting the user credential of a user proximate an access provider associated with the user credential. The method can be used in legacy protocols such as Point-to-Point protocol (PPP), Password Authentication Protocol (PAP), Challenge-Handshake Authentication Protocol (CHAP), Remote Authentication Dial In User Service (RADIUS) protocol, Terminal Access Controller Access Control System (TACACS) protocol, Lightweight Directory Access Protocol (LDAP), NT Domain authentication protocol, Unix password authentication protocol, HyperText Transfer Protocol (HTTP), HyperText Transfer Protocol over Secure sockets layer (HTTPS), Extended Authentication Protocol (EAP), Transport Layer Security (TLS) protocol, Token Ring protocol and/or Secure Remote Password protocol (SRP).

Method and system for securely authenticating network access credentials for users

A method to facilitate the financial settlement of service access transactions between multiple parties commences with the automatic collection of data concerning multiple transactions from respective service providers (e.g., ISPs). The multiple transactions are between the multiple service providers and multiple service customers. Respective transaction values are automatically determined for each of the multiple transactions. Account payable balances are automatically updated for the multiple service providers, and account receivable balances are automatically updated for the service customers based on the respective transaction values for each of the multiple transactions.

Method and system to facilitate financial settlement of service access transactions between multiple parties

A method and system is provided to secure a connection application in a multi-party access environment including a plurality of service providers. The method includes generating a customized connection application, and cryptographically signing the customized connection application, the customized connection application being for installation on a client machine. In certain embodiments, the customized connection application is in the form of a self-extracting executable to automatically install the connection application on the client machine. The customized connection application may be signed using Authenticode technology.

Method and system to secure a connection application for distribution to multiple end-users

A method of, and system for, associating a plurality of transaction data records generated in a service access system including a plurality of service providers is provided. The transaction data records are generated in response to a user accessing the system during a single user session. The method includes generating a unique session identification that is uniquely associated with the single user session and which is receivable by the service providers. The unique session identification is included in the transaction data record. The plurality of transaction data records is received at a transaction processing facility from the service providers and processes using the unique session identification of each transaction data record. In certain embodiments, the unique session identification is provided in a user identification string of each transaction data record when the user session is authentication.

Growing community of inventors

Sunnyvale, CA, United States of America

Jeff Steven Edgett