Authentication method without certificate duplication for users belonging to different institutions

Abstract

The present invention relates to a method for allowing a user to access the Internet. A user sends an Internet access request through a first Organization's gateway and supplies to the latter some credentials for his / her authentication with a second Organization. The credentials provided contain at least one piece of information about the second Organization. The first Organization contacts the second Organization for the purpose of authenticating the user and granting him / her access to the Internet. The second Organization then gives the user the authorization to access the Internet. According to the invention, upon the access request the gateway redirects the user to a web page of the second Organization, where the user supplies to the second Organization, through the web page, further authentication credentials required for his / her identification.

Description

technical field [0001] The invention relates to a method for allowing a user to access the Internet according to the preamble of claim 1 . Background technique [0002] In particular, the invention aims to increase the user's likelihood of accessing the Internet. [0003] The Internet has now become an indispensable work tool for many people, and thanks to wireless networks (eg WLAN), users can access the Internet even from outside the office. [0004] For example, airports, railway stations, and libraries have hot spots (Hot Spots), that is, access points where users can connect to the Internet through gateways. [0005] Within a given Organization's hotspot, access to this service is generally only granted to users with valid accounts registered with that organization. [0006] Thus, users of a given institution cannot access the Internet in areas not covered by the institution due to lack of interest or infrastructure failure. [0007] In order to overcome these proble...

AI Technical Summary

Problems solved by technology

[0020] This solution has the disadvantage of not being easy to identify the connecting user (e.g. for security or invoicing reasons) and requires associating the user's pseudonym with the user's identity registered with the remote certification authority

[0021] Furthermore, this solution has significant system scalability limitations, since the manual selection of the institutions the user wants to be certified by assumes that the university's gateway knows all existing is constantly updated with any revisions to the certification program

[0022] As the number of accreditation bodies increases, the complexity of the university's systems management also increases significantly

Images