Method for identifying internet users

Abstract

New Internet-based services require the Internet user to be identified to a service provider. According to the invention, this requirement is met by the Internet access provider providing the IP-messages of the client, if desired, with data identifying the IP-packets of the Internet user. The Internet access provider guarantees the integrity of this data with cryptographic means.

1 . Method for identifying Internet users according to which an Internet user is identified or authenticated at the Internet access point in the course of an access check when using the Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation. This method is characterized by the fact that Internet user identification information is added to an Internet user's IP message after it successfully passed the access check of the Internet access point, and prior to it being sent on, whereby the integrity of this information is guaranteed with cryptographic means.  
     
     
         2 . Method according to  claim 1 , characterized by the fact that Internet user identification information is added only when a certain requirement is met.  
     
     
         3 . Method according to  claim 2 , characterized by the fact that the Internet user provides the stated requirement.  
     
     
         4 . Method according to  claim 1  or  2 , characterized by the fact that the requirement in question is checked at the access point, where to this end, information is taken from the IP message and/or a database.  
     
     
         5 . Method according to one of the claims  1  through  4 , characterized by the fact that the method is realized on the Internet protocol level.  
     
     
         6 . Method according to one of the claims  1  through  4 , characterized by the fact that the method is realized on the transport protocol level.  
     
     
         7 . Method according to one of the claims  1  through  4 , characterized by the fact that the method is realized on the user protocol level.  
     
     
         8 . Method according to one of the claims  1  through  7 , characterized by the fact that the integrity of the Internet user identification information is guaranteed with a digital signature.  
     
     
         9 . Internet access point which 
 identifies or authenticates an Internet user in the course of the Internet access service,    adds Internet user identification information to an Internet user's IP message after the Internet access service has successfully been accomplished and prior to the IP message being sent on, whereby the integrity of this information is guaranteed with cryptographic means.    
     
     
         10 . Internet access point according to  claim 9 , characterized by the fact that it adds the Internet user identification information to the IP message only if a certain requirement is met.  
     
     
         11 . Internet access point according to  claim 10 , characterized by the fact that it checks the stated requirement with the help of information obtained from either the IP message and/or a database.