Systems and methods for managing network connectivity for mobile users

Abstract

Systems and methods are described for managing network connectivity for mobile users, particularly when a mobile user roams between two networks or between two subnets of a network. An announcer signal is broadcast by a host organization. The announcer signal includes a network identifier, an authorizer address and a verifier address. A mobile client monitors for the announcer signal and, when detected, provides an option to connect to the network via the authorizer. Once authorization is obtained, the mobile client communicates with the network through the verifier. The verifier received tagged data packets from a mobile client and only accepts the data packets if a valid tag (created with an authorization key) is included therewith. Multiple verifiers may be used to provide load balancing and fault tolerance (in the event a verifier fails). If a mobile client disconnects from a network and later reconnects, the mobile client does not have to be re-authorized if the mobile client still has a valid authorization key.

1 . A method for accessing a computer network, comprising: 
 detecting an announcer signal that identifies a computer network address of an authorizer in the computer network, the authorizer being configured to authorize user access to the computer network;    accessing the authorizer;    receiving authorization from the authorizer to access the computer network; and    accessing the computer network.    
   
   
       2 . The method as recited in  claim 1 , further comprising storing current network settings prior to accessing the computer network.  
   
   
       3 . The method as recited in  claim 1 , further comprising: 
 storing current network settings prior to accessing the computer network;    terminating access to the computer network; and    restoring the saved network settings as current network settings after terminating access to the computer network.    
   
   
       4 . The method as recited in  claim 1 , wherein the announcement signal further comprises a network identifier signal that identifies the computer network.  
   
   
       5 . The method as recited in  claim 1 , wherein the receiving authorization further comprises receiving an authorization key from the authorizer to create a tag to attach to each of a plurality of data packets transmitted to the computer network.  
   
   
       6 . The method as recited in  claim 1 , wherein the accessing the computer network further comprises attaching a tag created with an authorization key to data packets transmitted to the computer network, the tag allowing the data to be accepted by the computer network.  
   
   
       7 . The method as recited in  claim 6 , wherein a session time is associated with the authorization key and the authorization key is only valid if the session time has not expired.  
   
   
       8 . The method as recited in  claim 6 , further comprising encrypting the authorization key.  
   
   
       9 . The method as recited in  claim 6 , further comprising encrypting at least a portion of the tag.  
   
   
       10 . The method as recited in  claim 1 , wherein: 
 the announcer signal further identifies a computer network address of a verifier in the computer network that is configured to verify that a communication to the computer network are from a user that has been authorized to access the computer network;    the receiving authorization further comprises receiving an authorization key from the authorizer; and    the accessing the computer network further comprises transmitting key-tagged data packets to the computer network through the verifier.    
   
   
       11 . The method as recited in  claim 1 , wherein the detecting further comprises continuously monitoring to detect the announcement signal.  
   
   
       12 . A method, comprising: 
 detecting a first announcer signal in a first location, the first announcer signal identifying a network, an authorizer on the network and a first verifier on the network;    obtaining an authorization key from the authorizer;    transmitting data packets to the network through the first verifier, each data packet having a tag created with the authorization key included therewith;    detecting a second announcer signal in a second location, the second announcer signal identifying the network and a second verifier on the network; and    transmitting data packets to the network through the second verifier, each data packet having the tag included therewith.    
   
   
       13 . The method as recited in  claim 12 , wherein: 
 the authorization key includes an indication of a valid time period; and    the data packets are transmitted during the valid time period.    
   
   
       14 . The method as recited in  claim 12 , further comprising encrypting at least a portion of the tag.  
   
   
       15 . A system, comprising: 
 a detector configured to detect and receive a broadcast signal;    a web browser configured to access and communicate with a computer network by transmitting one or more data packets to a verifier on the computer network;    a controller configured to activate the detector to monitor for a broadcast signal from a network, the broadcast signal including a network address for the verifier and a network address for an authorizer that controls access to the computer network;    a tagging module configured to attach a tag created with an authorization key to each of the one or more data packets; and    wherein upon receipt of the broadcast signal, the controller directs the web browser to contact the authorizer to acquire an authorization key that allows the web browser to access the network by transmitting tagged data packets to the verifier.    
   
   
       16 . The system as recited in  claim 15 , further comprising an encryption module configured to encrypt at least a portion of the tag prior to transmitting the key-tagged data packets to the verifier.  
   
   
       17 . The system as recited in  claim 15 , wherein the computer network is a first computer network, the system further comprising: 
 second network settings associated with a second computer network; and    a network settings module configured to store the second network settings prior to accessing the first computer network.    
   
   
       18 . The system as recited in  claim 17 , wherein: 
 the web browser is further configured to disconnect from the first computer network; and    the network settings module is further configured to restore the second network settings when the web browser disconnects from the first computer network.