摘要:
A method is disclosed for authorizing a prepaid network service in a data network. A network end station issues a request for a prepaid network service. At a network node, such as a router serving as a gateway for selecting services, a determination is made about whether a user associated with the end station is authorized to access the prepaid network service. Network traffic from the end station is forwarded to a service provider only when the user is authorized to use the prepaid network service. Specific embodiments provide message flows among a mobile station, gateway support node, router, and authentication server that support providing prepaid services in a packet-switched network for mobile communication. In certain embodiments, a connection is held open for an end station while a prepaid quota value is refreshed at a portal, thereby reducing overhead and precluding the need to repeat user logon steps. Further, unused quota amounts can be returned to the authentication server for use in association with multiple concurrent connections of the same device.
摘要:
A service selection gateway (SSG) which permits multiple access quotas associated with a pre-paid service accessed by a user. For example, the user's access may be terminated if the usage exceeds a specified time or volume of data transferred (examples of access quotas). According to another aspect, access of a service is permitted based on different tariffs. Thus, a user may be charged differently depending on the applicable tariff. In an embodiment implemented in the context of pre-paid tariffs, multiple access quotas may be received associated with the same resource, and each quota may be computed according to a corresponding tariff.
摘要:
A service selection gateway (SSG) which receives data indicating tariff switching points, and sends accounting records enabling accurate computation of traffic volumes in each switching duration is described. In one embodiment, a counter value indicating the traffic volume for each tariff duration is sent. In an alternative embodiment, at least one accounting record containing two counters is sent in each duration, with one counter indicating an aggregate count of traffic volume (e.g., since the subscriber started a session) and another counter containing a marginal (or incremental) value since a switching point. Such an accounting record can be sent at any time point in a tariff duration, and the traffic volume in each tariff duration can be computed accurately.
摘要:
A method for on demand session provisioning includes receiving a first packet from a user at a service selection gateway. The service selection gateway provides the user with access to one or more services. The first packet is associated with a selected one of the services. An access request is sent to an authorization server. A temporary user session is created to allow the user to temporarily access the selected service pending authorization. Subsequently received packets are forwarded while the temporary user session is valid. An authorization response is received from the authorization server. If the authorization response indicates that the user is authorized to access the selected service, a permanent user session is created to allow the user to access the selected service. Otherwise, the temporary user session is terminated.