DE10311578B4 - Method and system for the paid provision of resources in a local network - Google Patents

Abstract

Method for the paid provision of resources (3) of a local area network (LAN) (2), namely to enable access to these resources (3), possibly including Internet access, and for the collection of their temporary use, in which the user has access to the resources (3) by means of a device (5) suitable for this purpose, namely by means of a mobile usage device, via an access device (1, 1', 1'') (access point) of the LAN (2) when using a password that is valid for a limited period of time by the password being made valid for the user or assigned to him beforehand when he makes a call to at least one chargeable service number of a public telephone network (6) announced and maintained by the provider of the resources (3) (resource provider), with calls to the at least one service number maintained by the resource provider at a public telephone network (6) connected and in d As the resources (3) that provide the LAN (2) for a fee, the authentication server (4) accumulates, which validates or assigns the passwords authorizing use of the LAN and manages them in terms of their period of validity in a memory (10, 12) and wherein the Release of access to the resources (3) bound to a valid password by the access points (1, 1', 1'') as a result of a query regarding the validity of a password used at the authentication server (4) or by the one in the LAN (2 ) integrated authentication server (4) is regulated itself, characterized in that the call to the service number of the resource provider is made using a mobile phone (8) and the mobile phone number of the caller serves as a temporary password for using the resources, so that the user can Password in the form of the cell phone number of the cell phone in his possession or a cell phone that was left to him is already assigned before the call, but this is only transmitted and activated by the call to use the resources (3) of the LAN (2), with the calculation of the fee for this use already being made in the course of the call to the chargeable service number and the The costs are collected via the billing for the number of the mobile phone (8) used to call this service number.

Description

The invention relates to a method for providing resources in a local area network (LAN) for a fee, namely for enabling access to these resources, which may also include Internet access, and for collecting their temporary use. The invention also relates to a system that enables the method to be carried out.

The development of society into an information society can be seen from the fact that information that can be called up electronically is now required by many people at almost any time in almost any place. This applies in particular to business travellers. Business travelers are therefore often not only equipped with a cell phone (cell phone), but also carry mobile computers such as laptops or so-called handhelds with them. In many cases, however, the required information cannot be kept on the mobile computers themselves because of their volume or for reasons of being up-to-date. The user of the computer then needs to obtain the information from external sources in order to be able to process it further on their own computer if necessary.

According to an article in PC-Magazine (issue 12/2002), wireless networks are currently being expanded intensively. In many places, such as airports, hotels or university facilities, access devices, so-called access points, are set up. Information seekers can use these access points to temporarily or temporarily integrate suitable electronic devices, such as their own laptop, into a local network and use its resources. This gives you access to databases or the Internet, for example, or the option of printing out documents created on your own computer on a network printer.

Of course, it is necessary for the operator of such a network to regulate access to the resources. In general, he will also charge for the use of the resources. Therefore, options for billing a time-limited use of the LAN provided by it are also required. On page 128 of the above-mentioned article in the technical journal PC-Magazin, a method is described in which cards with passwords are sold to the users of LAN resources. The acquisition of such a password then enables access to the local network and temporary use of its system resources. However, this method is comparatively cumbersome and ties up workers for the sale of the cards and related administrative tasks. This approach is therefore not very practical, especially for larger networks and a larger number of public users.

From the EP 1 075 161 A2 In this context, a method has become known according to which a temporarily valid password created by the password computer is transmitted to a user after a call to a password computer (PS) in order to use the resources of a LAN. The user in question can then log on to an access computer on the LAN using a user computer (UT) for access to the LAN using this password. However, the document does not provide a solution for a possible paid provision of the resources of the LAN or the collection of a corresponding paid use.

The object of the invention is therefore to specify a method which largely automates the paid provision of resources in a local network and the collection required for this. Furthermore, the task is to provide a corresponding system for carrying out the method.

The object is solved by a method with the features of the main claim. A system that achieves the object is characterized by the first device-related claim. Advantageous developments of the invention are given by the respective dependent claims.

According to the proposed method, a user is given access to the resources provided for a fee in a local area network (LAN), which may include Internet access, in a manner known per se in that he uses a suitable device to access one of, if necessary, multiple access devices (Access Points) using a temporary password to log into the network. The device used for this can be, for example, a laptop or a notebook, a PDA or even a mobile phone (cell phone) that has been expanded to include appropriate functions. In the following, we shall therefore generally speak of a mobile usage device. It is also essential for the procedure how the access authorization is basically acquired by the user and how the collection of the temporary use of the resources of the LAN takes place in connection with this. This is done in that the password is previously published when a call is made to a service number that is subject to charges and is maintained by the provider of the resources (resource provider). lichen telephone network is switched valid for the user or assigned to him. For this purpose, calls to the relevant and possibly other service numbers maintained by the resource provider are received by an authentication server connected to the public telephone network and integrated into the LAN that provides the resources for a fee. This authentication server validates or assigns the passwords authorizing use of the LAN (more on this below). It also manages the passwords with regard to their validity period for the purpose of a controlled release of network resources. The release of access to the resources of the LAN, which is linked to a valid password, is regulated by the access points as a result of a query to the authentication server or by the authentication server itself. In the first case, the respective access point asks the authentication server about the validity of a password used by a user for access and, depending on the result, enables access to the LAN and thus to its resources, while in the second variant, access to the LAN itself is granted the respective access point will be released independently of the password, but the resources are released by the authentication server and only if the password is valid. For password management, a table or list is set up in an internal memory or one attached to the authentication server, in which the respective passwords are stored with their possibly different validity periods. During a log-in process in the LAN or only when a resource is requested, the user is asked in a dialog for the password previously activated with the call (assigned to him or made valid). The authentication server verifies the password, either on the basis of a request from the access units, prompting them to grant access to the LAN if the password is valid, or, in the case of password-independent access to the LAN, on the basis of a request for a resource whose use it is helping password correctness.

A major advantage of the method can be seen in the activation of the passwords via the call to a fee-based service number, as this means that the collection is almost automatically carried out by collecting the fees for the use of the LAN resources via the billing for the number of the for the Call to the service number of the telephone device used. In Germany, for example, the existing 0190 system is ideal for this. There are comparable services in other states. According to an intended development of the invention, the resource provider has different service call numbers. This makes it possible to make the period of validity of a password for using the resources or the tariff classification of this use dependent on which of the service call numbers is called for the assignment or validation of the password.

With regard to the already mentioned system of 0190 numbers, one conceivable possibility is that the service numbers are numbers in the public ISDN network. In this case, the authentication server is connected to the ISDN network via an ISDN adapter. Taking into account the primarily relevant target group of business travelers and the widespread use of mobile phones, the call to the resource provider's service number is made, according to the invention, using a mobile radio device (for example cell phone). The mobile phone number of the caller, which is transmitted in the setup frame during call signaling, serves as a time-limited password for using the resources. The password in the form of the cell phone number of the cell phone in his possession or one provided to him is thus basically assigned to the user before the call is made to the service number. however, this will only become valid for the use of the LAN resources after the call is made. A similar procedure is of course also conceivable with regard to the use of a landline telephone to call the service number, although this variant is likely to be of secondary importance in practice.

As an exception to the use of a telephone number as a temporary password, it is also possible to assign the password by the user specifying the password when calling the service telephone number following a request from the authentication server, provided that the telephone number is known by a device calling the service telephone number is not transferred. If this password corresponds to conventions established for this purpose, it is made valid by the authentication server, that is to say it is preferably stored in the table or list already mentioned. In this case, the password can be defined by voice input by the user or by typing in a sequence of digits and/or letters on the keyboard of a terminal device used to call the service number.

A further possibility in the aforementioned case is that the password is generated by the authentication server itself in connection with the call to the service number and is sent to the user acoustically (announcement) and/or visually is made aware of the existing telecommunication connection. In any case, in the context of what is explained here, the assignment of a password or its generation by the authentication server naturally includes its validation (validation). As already explained, the last-mentioned options for defining the password by the user or generating it by the authentication server can exceptionally be considered as a parallel option to the basic use of the telephone number as a password, especially if a device calling the service number phone number is not transmitted (the phone number display is blocked or the caller's phone number is not in the call signaling to the called party) and the authentication server automatically generates a password upon detection of this circumstance or starts a dialog to determine it.

In addition to the processes involved in defining and activating a password, the details of access to the network resources are subject to closer examination and design when implementing the basic idea of the invention. According to a preferred embodiment of the invention, a network IP address is assigned to a mobile usage device used by the user immediately after it has been physically coupled to the LAN via a corresponding access point. This means that basically every device (of course, from a physical point of view necessarily connectable) is initially accepted by the network. The device or its user is initially classified as unknown and a password prompt generated by a unit of the LAN, possibly by the authentication server itself, is sent to the device for each request to use the resources of the LAN. However, the user receives full access to the LAN, in particular access to its resources, only after successful authentication and storage and assignment of the network IP address assigned to the mobile user device used by him to the memory of the authentication server in a table or List kept password. Along with this IP address, the validity period of the associated password is stored in the authentication server's memory.

Preferably, the network IP address for the mobile usage device used to use the resources is assigned by the authentication server using the Dynamic Host Configuration Protocol (DHCP). A further development of the method according to the invention provides that the user of the system resources of the LAN is able to interrupt the use prompted by dialogue before the validity period of the password used by him expires without his remaining time credit forfeiting. For this purpose, the authentication server interrupts a timer that it has set for the corresponding password in the course of password management, and the remaining time associated with this password is stored in the memory for a maximum duration that can be specified. The use of the resources can then be resumed at a later time using the same password. Linked to this in a certain way is the idea of also interrupting the timer in the event of a fault-related interruption of network access from the authentication server and storing the corresponding parameters. An interruption can then be recognized, for example, by "IDLE Timer".

The system for providing resources in a local area network (LAN) for a fee that is suitable for solving the task is characterized in that, in addition to the usual network components and the access points, it has an authentication server that consists of at least one control unit integrated into a LAN that provides resources for a fee and a password management unit that is spatially separate from the control unit or units and has a connection to a public telephone network. In the password management unit of the authentication server, following the descriptions of the method, one or more service call numbers of the public telephone network maintained by a resource provider (if the password management unit is spatially separate from the control unit or units, possibly also by several resource providers) accumulate. When calling one of these service call numbers, the password management unit validates or assigns a password that authorizes the use of the resources. The authentication server manages the passwords activated in this way for using the resources with regard to their period of validity and keeps them in a memory of the password management unit and/or its control unit for the purpose of a controlled release of the network resources. Either the access points regulate access to the LAN in cooperation with the authentication server using this password, or access to the LAN is independent of the password via the access points, but the control unit of the authentication server regulates access to the resources provided for a fee via the password.

Because of the spatially separate arrangement of the password management unit, this is via a control unit and, for example, via a Wide Area Network (WAN) or the Internet integrated into a LAN that provides resources for a fee. This opens up the possibility of integrating the authentication server, more precisely its password management unit, into local networks of a number of resource providers. If the use of service call numbers in the ISDN fixed network is assumed, the authentication server has an ISDN adapter for connecting to the public ISDN network. The physical connection of a user to the LAN can be wired or wireless. Consequently, an embodiment of the system according to the invention provides that at least one of the access points for a LAN is an access unit for wireless access, a so-called WLAN or wireless LAN access point.

• 1: Die Struktur eines zur Durchführung des Verfahrens geeigneten Systems in einer schematischen Darstellung,
• 2: Eine etwas modifizierte Variante des Systems, ebenfalls in schematischer Darstellung.

The invention is to be explained in more detail below using exemplary embodiments. In the accompanying drawings show:

• 1 : The structure of a system suitable for carrying out the method in a schematic representation,
• 2 : A slightly modified variant of the system, also in a schematic representation.

1. 1. Der Nutzer bzw. User, welcher die Ressourcen 3 des LAN 2 beispielsweise für den Zugriff auf das Internet 3' nutzen möchte, wählt eine ihm vom Bereitsteller der Ressourcen 3 (beispielsweise durch Aushang) bekannt gegebene Servicerufnummer. Hierbei kann es sich unter Nutzung der gegenwärtig vorhandenen Möglichkeiten um eine Servicerufnummer des 0190-Systems, beispielsweise der Form 0190xxx im Festnetz handeln.
2. 2. Sein Anruf läuft bei dem Authenitfikationsserver 4, welcher über den ISDN-Adapter 7 mit dem ISDN-Netz 6 verbunden ist, bzw. genauer gesagt, bei dessen Kennwortmanagementeinheit 9 auf und wird von dieser abgefragt.
3. 3. Die Rufnummer des Anrufers, beispielsweise der Form 0170xxx, wird dem Server im Setup-Frame als Calling Party Number übermittelt.
4. 4. Durch die Anwahl der Servicerufnummer und die Abfrage des Anrufs erfolgt neben der Aktivierung des Kennworts gleichzeitig der Bezahlvorgang.
5. 5. Hiernach löst der Authentifikationsserver 4, gegebenenfalls nach einer Informationsansage die Verbindung aus und speichert die Rufnummer in einem internen oder von ihm verwalteten Speicher 10 in einer Liste mit Kennwörtern. Dabei dient die Rufnummer des Anrufers als Kennwort für die temporäre Nutzung der Ressourcen 3 des LAN 2, wobei diesem Kennwort je nach zuvor angewählter Servicerufnummer eine bestimmte Gültigkeitsdauer zugeordnet ist.
6. 6. Nachdem der Nutzer durch den Anruf bei der Servicerufnummer sein Kennwort aktiviert hat, kann er sich mit seinem Notebook 5 beim LAN 2 über einen Access-Point 1,1' einbuchen. Hardwareseitig geschieht dies dadurch, dass er bzw. das Notebook 5 eine drahtlose WLAN-Verbindung zu dem lokalen Netzwerk 2 aufbaut. Im Zuge des Verbindungsaufbaus wird von dem Nutzer die Eingabe seines Kennworts gefordert. Gemäß dem dargestellten Beispiel gibt der Nutzer bei der Kennwortabfrage die Rufnummer seines Mobiltelefons 8 an. Durch den entsprechenden Access-Point 1,1' erfolgt eine Abfrage beim Authentifikationsserver 4 zur Verifizierung des Kennworts.
7. 7. Sofern das vom Nutzer angegebene Kennwort in der durch den Authentifikationsserver 4 verwalteten Liste als gültig gekennzeichnet ist, erfolgt nach entsprechender Rückmeldung des Authentifikationsservers 4 durch den Access-Point 1, 1' die Freischaltung der SystemRessourcen für den Nutzer. Andernfalls wird der Nutzer durch eine entsprechende Mitteilung abgewiesen. Zur Vereinfachung der Prozedur kann der Nutzer gegebenenfalls das Kennwort, nämlich seine Handynummer in seinem Laptop 5 hinterlegen, so dass sie von diesem bei der Einwahl in das LAN 2 selbsttätig im Zuge der Kennwortabfrage ausgegeben wird und somit der Verfahrensablauf noch weitergehend automatisiert ist.

Der vorstehend grundsätzlich dargestellte Ablauf kann sich im Einzelfalle auch in einer etwas modifizierten Form vollziehen. So wird beispielsweise von einigen Handys die Calling Party Number, unter Umständen auch durch eine entsprechende Einstellung des Nutzers, nicht übertragen. Für diesen Fall sind folgende Konstellationen denkbar. Eine Möglichkeit besteht darin, dass der Nutzer das Verfahren nicht anwenden kann und beim Anruf der Servicerufnummer ohne das Entstehen von Kosten abgewiesen und der Anruf nicht abgefragt wird. Eine andere Möglichkeit ist aber dadurch gegeben, dass der Nutzer beim Anruf der Servicerufnummer in einem Dialog zur Festlegung eines Kennworts durch Spracheingabe oder Eintippen einer Buchstaben- und/oder Zahlenkombination aufgefordert wird. Das solchermaßen angegebene Kennwort wird dann wiederum von dem Authentifikationsserver 4 in der entsprechenden Liste in seinem Speicher 10 verwaltet. Schließlich ist es auch denkbar, dass das Kennwort vom Authentifikationsserver 4 in der Kennwortmanagementeinheit 9 selbst generiert und dem Anrufer durch Sprachansage mitgeteilt wird. Vorteilhafterweise werden diese Kennwortvergabeprozeduren automatisch dann angestoßen, wenn sich in der Anrufsignalisierung (Setup) keine Rufnummer (Calling Party Number) befindet.the 1 shows the schematic representation of a system suitable for carrying out the method according to the invention. The system essentially comprises the local area network 2 (LAN) with its resources (not shown in detail here, apart from the Internet access 3), one or more network access points 1, 1' (access points) and an authentication server 4 integrated into the LAN 2. As can be seen from the drawing, the authentication server 4 has a connection to a public telephone network 6 and consists (see 2 ) essentially consists of a password management unit 9 and at least one control unit 11 managing access to the LAN 2 together with the access points 1, 1'. It is preferably coupled to the ISDN network 6 via an ISDN card 7. The passwords are from the authentication server 4 in one, in the 2 recognizable memory 10 of the password management unit 9 or in a memory 12 of the controller 11 managed. The components required by the user of the resources 3 are exemplified by a cell phone 8 and a notebook 5 . In connection with the acquisition of an authorization to use the resources 3 and their use, the following sequence takes place according to this example:

1. 1. The user who would like to use the resources 3 of the LAN 2, for example to access the Internet 3′, dials a service call number given to him by the provider of the resources 3 (for example by posting). Using the options currently available, this can be a service call number in the 0190 system, for example in the form 0190xxx in the landline network.
2. 2. His call arrives at the authentication server 4, which is connected to the ISDN network 6 via the ISDN adapter 7, or more precisely, at its password management unit 9, and is queried by it.
3. 3. The number of the caller, for example in the form 0170xxx, is sent to the server in the setup frame as a calling party number.
4. 4. By dialing the service number and querying the call, the payment process takes place at the same time as the password is activated.
5. 5. The authentication server 4 then triggers the connection, optionally after an information announcement, and stores the telephone number in a list with passwords in an internal memory 10 or one managed by it. The number of the caller serves as a password for the temporary use of the resources 3 of the LAN 2, with this password being assigned a specific period of validity depending on the previously dialed service number.
6. 6. After the user has activated his password by calling the service number, he can use his notebook 5 to log in to the LAN 2 via an access point 1,1'. On the hardware side, this is done in that he or the notebook 5 sets up a wireless WLAN connection to the local area network 2 . In the course of establishing the connection, the user is asked to enter his password. According to the example shown, the user enters the phone number of his cell phone 8 when prompted for a password. The corresponding access point 1,1' queries the authentication server 4 to verify the password.
7. 7. If the password specified by the user is marked as valid in the list managed by the authentication server 4, the system resources are activated for the user after corresponding feedback from the authentication server 4 through the access point 1, 1'. Otherwise, the user will be rejected by a corresponding message. To simplify the procedure, the user can optionally store the password, namely his cell phone number, in his laptop 5 so that it is automatically issued by the latter when dialing into the LAN 2 as part of the password query and thus the process flow is automated to a greater extent.

The process outlined above can also take place in a slightly modified form in individual cases. For example, the calling party number is not transmitted by some mobile phones, possibly due to the user setting accordingly. In this case, the following constellations are conceivable. One possibility is that the user cannot use the method and when calling the service number is rejected without incurring any costs and the call is not answered. However, another possibility is that when calling the service number, the user is prompted in a dialogue to define a password by speaking or typing in a combination of letters and/or numbers. The password specified in this way is then in turn managed by the authentication server 4 in the corresponding list in its memory 10 . Finally, it is also conceivable that the password is generated by the authentication server 4 in the password management unit 9 itself and communicated to the caller by voice announcement. Advantageously, these password allocation procedures are automatically initiated if there is no call number (calling party number) in the call signaling (setup).

While retaining the basic process, the invention allows the method to be varied such that different service call numbers can be dialed for the user to request or define a password. Different periods of validity for the passwords can be set at different prices via these different phone numbers. The corresponding administration by the authentication server 4 and the assignment of the period of use then takes place using the called party number of the called service connection. The duration of use of the resources by the user logged on to the LAN 2 is controlled by a timer on the authentication server 4 implemented in terms of circuitry or software as part of the control unit 11.

1. 1. Der Nutzer koppelt sich mit einem entsprechenden Gerät 5 physikalisch an und meldet sich beim LAN 2 an. Er bzw. das von ihm verwendete Gerät 5 bekommt durch einen Access Point 1, 1', 1'', einen hier nicht dargestellten, gesonderten Steuerserver oder durch den Authentifikationsserver 4 per DHCP eine IP-Adresse zugeteilt.
2. 2. Der Nutzer mit der neuen IP-Adresse wird zunächst als unbekannt eingestuft, da in der vom Authentifikationsserver 4 mittels der Steuerung 11 im Speicher 12 geführten Liste keine Informationen zu ihm vorhanden sind. Dem Nutzer wird auf jede Web-Anfrage hin eine „Kennworteingabeseite“ zugesendet. Denkbar sind hier auch Angaben zur Kennwortgewinnung (Anruf 0190XXX) Tarife oder Werbung.
3. 3. Der Nutzer gibt sein Kennwort, beispielsweise die Rufnummer seines Mobiltelefons 8, ein. Dabei ist eine Automatisierung per Browserfunktion seitens des von ihm verwendeten Gerätes 5 möglich, sofern darin das Kennwort hinterlegt ist, da dieses im Falle der Nutzung der Handynummer immer gleich ist.
4. 4. Durch die Steuerung 11 wird geprüft, ob das Kennwort im Authentifikationsserver 4 gespeichert ist. Ist dies der Fall, werden der zuvor vergebenen IP-Adresse in der entsprechenden Liste des Authentifikationsservers 4 das Kennwort und dessen Gültigkeitsdauer zugeordnet und die das entsprechende LAN 2 betreffenden Angaben dieser Art vom Speicher 10 zum Speicher 12 übertragen. Ein Ablauftimer (Bestandteil der Steuerung 11) wird gestartet. Dem Nutzer wird die erfolgreiche Freigabe mitgeteilt.
5. 5. Bei weiteren Netzwerk-Anfragen des Nutzers wird mittels des Authentifikationsservers 4 geprüft, ob unter der IP-Adresse ein Freigabedatensatz vorhanden ist. Bei positivem Ergebnis wird die Anfrage, beispielsweise über die Netzwerkkarte 13' des Authentifikationsservers 4 unter Nutzung der Ressource 3 (Internetzugang) an das Internet 3' weitergeleitet.
6. 6. Nach Ablauf des Timers (Ende der Nutzungszeit) wird der Datensatz (Kennwort = Rufnummer und IP-Adresse) in der vom Authentifikationsserver 4 mittels der Steuerung 11 im Speicher 12 verwalteten Tabelle gelöscht bzw. in andere (hier nicht dargestellte) Speicher zu Verwaltungszwecken umgespeichert.
7. 7. Bei weiteren Netzwerkanfragen wird durch den Authentifikationsserver 4 kein Freigabedatensatz mehr gefunden und dem Nutzer wird wieder die „Kennworteingabeseite“ gesendet.
8. 8. Für weitere Nutzung des Zugangs muss sich der Nutzer nun per Anruf erneut ein Kennwort zuweisen oder gültig schalten lassen.

Another embodiment is through the 2 illustrated. The components 1, 1′, 1″, two wireless access paths 1, 1′ connected to a hub or switch 1″ and the hub or switch 1″ itself, which also enables wired coupling, serve as access units. The access units 1, 1 ', 1'' are connected via the LAN 2 to the authentication server 4, which is integrated into the LAN 2 via the network card 13. Otherwise, the components of the system essentially correspond to those of the 1 , except that they are connected or interconnected somewhat differently with regard to a slightly different process when logging into the LAN 2 . In the example shown, the use of the resources is limited to the use of an Internet access 3 made available via the network card 13′ of the authentication server 4. The dashed line running between the password management unit 9 and the control unit 11 indicates their possible spatial separation from one another. In this case, it is possible for the password management unit 9 to work together with a number of control units 11 directly integrated into the LAN 2 of different resource providers and for the authentication server 4 to be used by a number of such providers. The password management unit 9 is then indirectly integrated into different LANs 2 via the respective control units 11 (in each case directly integrated into a LAN 2 ). The integration is provided via the network card 13" of the password management unit 9, the Internet 3' and the network card 13' of one (of possibly several) control units) 11. At least one control unit 11 can also, as shown in the example, be connected directly to the be connected to the password management unit 9. The list of passwords relating to a respective LAN 2 is transferred (restored) from the memory 10 of the password management unit 9 to the memory 12 of the control unit 11 relating to it, preferably when a user first logs into the relevant LAN 2 If the password management unit 9 is used jointly by several resource providers, it has an additional network card 13" shown in dashed lines and is directly connected to a LAN 2, but to the other LANs (not shown here), as already shown, via corresponding Control units 11 and a dashed line in the drawing again Darge presented network connection, for example via the Internet 3 'indirectly integrated. The following process takes place when a user logs on to one of the LAN 2:

1. 1. The user physically connects to a corresponding device 5 and registers with the LAN 2 . He or the device 5 he uses is assigned an IP address by an access point 1, 1', 1'', a separate control server (not shown here) or by the authentication server 4 via DHCP.
2. 2. The user with the new IP address is initially classified as unknown, since there is no information about him in the list kept by the authentication server 4 by means of the controller 11 in the memory 12 . A "password entry page" is sent to the user for each web request. are conceivable here also information on password recovery (call 0190XXX) tariffs or advertising.
3. 3. The user enters his password, for example the number of his cell phone 8 . Automation via the browser function on the part of the device 5 used by him is possible, provided that the password is stored in it, since this is always the same when using the cell phone number.
4. 4. The controller 11 checks whether the password is stored in the authentication server 4. If this is the case, the password and its period of validity are assigned to the previously assigned IP address in the corresponding list of the authentication server 4 and the information of this type relating to the corresponding LAN 2 is transmitted from the memory 10 to the memory 12 . An expiry timer (part of the controller 11) is started. The user will be informed of the successful release.
5. 5. In the case of further network requests from the user, the authentication server 4 checks whether a release data record is available under the IP address. If the result is positive, the query is forwarded to the Internet 3', for example via the network card 13' of the authentication server 4 using the resource 3 (Internet access).
6. 6. After the timer has expired (end of usage time), the data record (password = phone number and IP address) is deleted from the table managed by the authentication server 4 using the controller 11 in memory 12 or into other memory (not shown here) for administrative purposes restored.
7. 7. In the case of further network requests, the authentication server 4 no longer finds a release data record and the “password entry page” is sent to the user again.
8. 8. In order to continue using the access, the user must now be assigned a password again by phone or have it activated.

Reference List

1, 1', 1''

Access Unit (Access Point)

1.1'

WiFi access point

1"

hub or switch

2

local area network (LAN)

3

resources

3'

Internet

4

authentication server

5

(mobile) usage device, e.g. B. Notebook

6

public telephone network

7

ISDN adapter

8th

telephone terminal, e.g. B. Mobile phone

9

password management unit

10

Storage

11

control unit

12

Storage

13, 13', 13"

network card

Claims (7)

Method for providing resources (3) of a local area network (LAN) (2) for a fee, namely to enable access to these resources (3), which may include Internet access, and for the collection of their temporary use, in which the user has access to the resources (3) by means of a device (5) suitable for this purpose, namely by means of a mobile usage device, via an access device (1, 1', 1'') (access point) of the LAN (2) when using a password that is valid for a limited period of time by the password being made valid for the user or assigned to him beforehand when calling at least one of the provider of the resources (3) (resource provider) and maintaining a chargeable service number of a public telephone network (6), with calls to the at least one service number maintained by the resource provider at a public telephone network (6) connected and in d As the resources (3) that provide the LAN (2) for a fee, the authentication server (4) accumulates, which validates or assigns the passwords authorizing use of the LAN and manages them in a memory (10, 12) with regard to their period of validity and wherein the Release of access to the resources (3) bound to a valid password by the access points (1, 1', 1'') as a result of a query regarding the validity of a password used at the authentication server (4) or by the one in the LAN (2 ) integrated authentication server (4) is regulated itself, characterized in that the call to the service number of the resource provider is made using a mobile phone (8) and the mobile phone number of the calling party serves as a temporary password for using the resources, so that the user can Password in the form of the cell phone number of the cell phone in his possession or provided to him is already assigned before the call, but this is only transmitted and activated by the call to use the resources (3) of the LAN (2), with the calculation of the fee for this use already being made in the course of the call to the chargeable service number and the The costs are collected via the billing for the number of the mobile phone (8) used to call this service number. procedure after claim 1 , characterized in that the resource provider has different service numbers and the period of validity of a password for using the resources (3) depends on which of these service numbers is called for its assignment or validation. procedure after claim 1 or 2 , characterized in that the service number or numbers are numbers in the public ISDN network (6) to which the authentication server (4) is connected via an ISDN adapter (7). System for the paid provision of resources (3) of a local area network (LAN) (2) according to the method claim 1 , with - a device (5), namely a mobile usage device, - at least one access device (1, 1', 1'') (access point) of the LAN (2), via which the device (5) suitable for this purpose has access to the resources (3) when using a password that is valid for a limited period of time, - an authentication server (4), consisting of at least one control unit (11) integrated into the LAN (2) that provides resources for a fee and of a control unit (11), optionally from the or the Control units (11) spatially separated password management unit (9) with a connection to a public telephone network (6), with the password management unit (9) of the authentication server (4) maintaining one or more of one or more resource providers service numbers of the public telephone network (6) accrue, when they are called by the password management unit (9), a password that authorizes the use of a LAN (2) is validly switched or assigned en, and wherein the authentication server (4) manages the passwords activated in this way for using the resources (3) with regard to their period of validity for the purpose of releasing resources (3) in a memory (10, 12), characterized in that that - the system also includes a mobile phone (8) for calling the service number of a resource provider, whose mobile phone number serves as a time-limited password for using the resources (3), - the password management unit (9) of the authentication server (4) in local Networks (2) of multiple resource providers is involved. system after claim 4 , characterized in that the password management unit (9) of the authentication server (4) in a spatially separated arrangement via a control unit (11) and via a wide area network (WAN) or the Internet (3') indirectly in a LAN ( 2) is involved. system after claim 4 , characterized in that the authentication server (4) has an ISDN adapter (7) for connection to the public ISDN network (6). system after claim 4 , characterized in that at least one access point (1, 1', 1'') is an access unit (1, 1') for wireless access (WLAN or wireless LAN access point).

Images