Abstract: A method and apparatus to control a client in a communication network accessed by the client through a service provider independent of a client controller. A hardware capable Internet Service Provider (ISP) functions as the communications network service provider. A virtual ISP operates the client controller, leases Internet access time from the hardware capable ISP, and resells Internet services to users. A client accesses the network through a two stage authentication process. First, the hardware capable ISP authenticates the client using a user-provided ID and password. After successfully logging on to the hardware capable ISP, the client automatically sends a start session message containing user identity information to the client controller. In response, the client controller sends a control message to the client authorizing use of the network for a predetermined time period. When the client stops accessing the network, the client informs the client controller using an end session message.

Abstract: A method and apparatus to control a client in a communications network accessed by the client through a service provider independent of a client controller, such as an Internet service provider. When the client starts the session, a start session message containing user identity information is sent from the client to the client controller using the network in accordance with a client control protocol. The client controller can then determine whether the client is authorized to use the network based on the user identity information and, for example, a user database. If the client is authorized, a session authorization message is sent to the client authorizing the client to use the network for a predetermined period of time. When the client stops accessing the network, the client informs the client controller by sending an end session message. If the client wants to access the network beyond the predetermined period of time, the client sends a continue session message to the client controller.

Abstract: A method and apparatus to determine user identity and limit access to a communications network. A first message containing user identity information is received from a client computer in accordance with a first protocol. A first network address is determined from the first message. A second message containing an information request is also received from the client in accordance with a second protocol, and a second network address is determined from the second message. The requesting user identity is then determined based on the first network address, the user identity information and the second network address. Based on the requesting user identity, it can be decided whether to grant the information request. If access is granted, the requested information is retrieved using the communications network.

Abstract: A method and apparatus to control a client in a communication network accessed by the client through a service provider independent of a client controller. In one embodiment, a hardware capable Internet Service Provider (ISP) functions as the communications network service provider. A virtual ISP operates the client controller, leases Internet access time from the hardware capable ISP, and resells Internet services to users. A client accesses the network through a two stage authentication process. First, the hardware capable ISP authenticates the client using a user-provided ID and password. After successfully logging on to the hardware capable ISP, the client automatically sends a start session message containing user identity information to the client controller. In response, the client controller sends a control message to the client authorizing use of the network for a predetermined time period.