Douglas W Kay

US Patent:

51134993, May 12, 1992

Filed:

Apr 28, 1989

Appl. No.:

7/344905

Inventors:

Richard C. Ankney - Chantilly VA
Ronald P. Bonica - Falls Church VA
Douglas E. Kay - Chevy Chase MD
Patricia A. Pashayan - Herndon VA
Roy L. Spitzer - Vienna VA

Assignee:

Sprint International Communications Corp. - Reston VA

International Classification:

G06F 1314

US Classification:

395325

Abstract:

A security access management system for a packet switched data communications network has access management apparatus operatively associated with the packet switches at each entry point of the network. The access management apparatus includes an administrative host processor for examining user terminal authorization information in packets received at the associated packet switch for transmission through the network to destination addresses for the packets. A database associated with the administrative host stores information including levels of authorization of the user terminals for the respective entry point of the network for access to specified destinations, as pre-assigned by the network customer. Also included in the access management apparatus is a validation host processor which responds to comparisons between the user terminal authorization information contained in the packet and the pre-assigned level of authorization for the same user terminal, and, if they correspond, to grant access by that user terminal through the associated packet switch to the destination address with which a communication session is requested; or, if they differ, to deny such access. The access management apparatus is located remote from the user terminals using the particular entry point for the network.