Abstract:
A pocket-size authentication token for authenticating an individual to a network and enabling a wireless network connection for a non-network-enabled device. Authentication token acts as a security token or dongle, supplying credentials of one individual to the network in order to gain access to the network. Authentication token provides the electrical interface and all logic required to communicate with the network, utilizing a wireless network access device. Authentication token provides the electrical interface and all logic required to communicate with the non-network-enabled device. Authentication token transfers data from the non-network-enabled device to the individual&#39;s online account.

Description:
SUMMARY 
     The present invention is defined by the claims below. Embodiments of the present invention provide an apparatus and method for, among other things, authenticating an individual to a network and enabling wireless access to a network for a non-network-enabled (NNE) device. A pocket-size authentication token is provided. In the embodiments, the pocket-size authentication token provides both a physical and logical connection between the NNE device and a wireless network access device (WNA device). The pocket-size authentication token communicates with the NNE device and obtains information from the NNE device. The pocket-size authentication token utilizes the WNA device to connect with the network. The authentication token provides authentication to the network with some form of identification, such as user credentials, user name and password, for one individual. Once a connection is established, the pocket-size authentication token transfers data between the NNE device and one or more online accounts of the individual. 
    
    
     
       BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS 
       Illustrative embodiments of a pocket-size authentication token are described in detail below with reference to the attached drawing figures, which are incorporated by reference herein and wherein: 
         FIG. 1  is a schematic diagram of an exemplary overall system suitable for use in implementing embodiments of a pocket-size authentication token; 
         FIG. 2  is a block diagram of an exemplary pocket-size authentication token; 
         FIG. 3  is a general flow chart illustrative of an exemplary pocket-size authentication token; 
         FIG. 4  is a detailed flow chart illustrative of an exemplary pocket-size authentication token wherein the pocket-size authentication token transfers data from a non-network-enabled device to a network; 
         FIG. 5  is a detailed flow chart illustrative of an exemplary pocket-size authentication token wherein the pocket-size authentication token receives data from a network and may store the data or transfer the data to a non-network-enabled device; 
         FIG. 6  is a perspective view of an exemplary pocket-size authentication token having a Universal Serial Bus connector and a miniature Universal Serial Bus (USB) connector; 
         FIG. 7  is a perspective view of an exemplary pocket-size authentication token having a personal computer card slot and a miniature USB connector; 
         FIG. 8  is a perspective view of an exemplary pocket-size authentication token having a miniature USB connector and illustrating how the pocket-size authentication token mechanically couples with a wireless network access device; and 
         FIG. 9  is a perspective view of an exemplary pocket-size authentication token having a miniature USB connector and depicting the pocket-size authentication token coupled with a wireless network access device. 
     
    
    
     DETAILED DESCRIPTION 
     Embodiments of the present invention provide apparatuses and methods for wirelessly connecting a non-network-enabled device (NNE device) to a network, authenticating a single user of the NNE device to the network, and transferring data between the NNE device and the network. 
     Acronyms and Shorthand Notations 
     Throughout the description of the present invention, several acronyms and shorthand notations are used to aid the understanding of certain concepts pertaining to the associated system and services. These acronyms and shorthand notations are solely intended for the purpose of providing an easy methodology of communicating the ideas expressed herein and are in no way meant to limit the scope of the present invention. The following is a list of these acronyms: 
     
       
         
               
               
               
             
           
               
                   
                   
               
             
             
               
                   
                 NNE 
                 non-network-enabled 
               
               
                   
                 PC card 
                 personal computer card 
               
               
                   
                 USB 
                 Universal Serial Bus 
               
               
                   
                 WiMAX 
                 Worldwide Interoperability for Microwave Access 
               
               
                   
                 WNA 
                 Wireless Network Access 
               
               
                   
                   
               
             
          
         
       
     
     Further, various technical terms are used throughout this description. An illustrative resource that fleshes out various aspects of these terms can be found in Newton&#39;s Telecom Dictionary by H. Newton, 22nd Edition (2006). 
     As one skilled in the art will appreciate, embodiments of the present invention may be embodied as, among other things: a method, system, or computer-program product. Accordingly, the embodiments may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware. In one embodiment, the present invention takes the form of a computer-program product that includes computer-useable instructions embodied on one or more computer-readable media. 
     Computer-readable media include both volatile and nonvolatile media, removable and nonremovable media, and contemplates media readable by a database, a switch, and various other network devices. By way of example, and not limitation, computer-readable media comprise media implemented in any method or technology for storing information. Examples of stored information include computer-useable instructions, data structures, program modules, and other data representations. Media examples include, but are not limited to information-delivery media, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile discs (DVD), holographic media or other optical disc storage, magnetic cassettes, magnetic tape, magnetic disk storage, and other magnetic storage devices. These technologies can store data momentarily, temporarily, or permanently. 
     The particular embodiments herein are intended in all respects to be illustrative rather than restrictive. Alternative embodiments will become apparent to those skilled in the art to which the present invention pertains without departing from its scope. 
     Referring to the drawings in general, and initially to  FIG. 1  in particular, an exemplary operating environment for implementing embodiments of the present invention is shown and designated generally as network access  100 . Network access  100  is but one example of a suitable operating environment and is not intended to suggest any limitation as to scope of use or functionality. Neither should the network access  100  be interpreted as having any dependency or requirement relating to any one or combination of components/modules illustrated. 
     With continued reference to  FIG. 1 , network access  100  includes a NNE device  105  that couples with an authentication token  110  utilizing a device connector  115  attached to the authentication token  110 . The authentication token  110  additionally utilizes a network connector  120  to mechanically couple with a wireless network access (WNA) device  125 . The authentication token  110 , the device connector  115 , and the network connector  120  are parts of a user identification system  145 . The WNA device  125  provides wireless communication with a network  130 . The network  130  in turn provides the NNE device a connection with an online application or service  135  and in some instances with a user account  140  for the online application  135 . 
     The NNE device  105  may be any device with a physical communication port capable of transmitting and receiving data. Exemplary NNE devices may include, but are not limited to, devices with one or more communication ports, such as non-network-enabled computers, digital cameras, vending machines, and the like. Exemplary communication ports may include, but are not limited to, a Universal Serial Bus (USB) port. A NNE vending machine may have a communication port capable of transmitting and/or receiving data such as status of the machine, number of items remaining, cash box full indication, maintenance required indication, and the like. Again, exemplary communication ports may include, but are not limited to, a USB port. 
     The WNA device  125  may be any device with 1) the ability to communicate wirelessly with a network, and 2) the ability to communicate with the authentication token  110 . Exemplary devices may include, but are not limited to, a Worldwide Interoperability for Microwave Access (WiMAX) card or a card compatible with WiMAX technology, based on the IEEE 802.16 standard or variations thereof, a WiFi card or a card compatible with WiFi technology, based on the IEEE 802.11 standard or variations thereof, and the like. 
     The authentication token  110  includes the device connector  115  and the network connector  120 . The device connector  115  physically connects or couples the NNE device  105 , and the authentication token  110 , providing a connection capable of serving as a conduit for a logical connection. Exemplary device connectors  115  may include, but are not limited to, a mini-USB connector, such as physically couples with connectors typically found at least on digital cameras and other NNE devices. One of ordinary skill in the art would recognize that many other types of connectors are suitable for use, as well as connectors capable of coupling with adapters that convert from one type of connector to another. 
     The network connector  120  physically couples with the WNA device  125 , providing a connection capable of serving as a conduit for a logical connection. Exemplary network connectors  120  may include, but are not limited to, a USB connector, as may be found at least on a WiMAX card or other WNA device  125 . 
     The authentication token  110  combines network communication with a security token for a NNE device  105 . A security token is a device that automatically authenticates a single user attempting to access the network and/or applications on the network. A security token connects with another device or system and supplies data that identifies, or enables the device or system to identify, automatically, without user intervention, a single user to which the token is assigned and the access authorization associated with that user. In embodiments the authentication token has the capability of identifying only a single user. Thus, the authentication token  110  enables the NNE device  105  to communicate with the network  130  and automatically, without user intervention, interact with whatever online services, applications, and/or accounts the user is authorized to access, based on the user identification data stored in the authentication token  110 . The user identification data stored in the authentication token  110  includes at least a portion of a user profile associated with the user to which the authentication token  110  is assigned. The authentication token is pre-configured with the user profile such that it may automatically authenticate the single user to the network or applications on, or accessed via, the network. The user profile may contain information related to user identification, user credentials, username, password, online subscription information, online account information, and the like. The entire user profile may be stored in the authentication token  110 , or a portion of the user profile may be stored in the authentication token  110  with the remaining portion(s) residing elsewhere, for instance, on the network. 
     One embodiment automatically, without user intervention, authenticates a user to an online photo sharing website, and uploads photos from a digital camera to the user&#39;s account on the photo sharing website. Additionally, because the embodiment serves as a security token, identifying one specific user, it allows the user to use any compatible camera, regardless of ownership, to upload photos to his or her account. 
     The network  130  may be any type of network capable of being accessed via a WNA device  125 . Exemplary networks  130  may include, but are not limited to, a WiMAX network or a network compatible with WiMAX technology, based on the IEEE 802.16 standard or variations thereof, a WiFi network or a network compatible with WiFi technology, based on the IEEE 802.11 standard or variations thereof, the Internet, and the like. A network  130  may provide access to an online user account  140  for an online application or service  135 . The online application or service  135  may be any application or service capable of residing on a network  130 , including but not limited to, Web applications and Internet access. Exemplary user accounts  140  may include, but are not limited to, any type of online access requiring specific authorization for a user, before granting access to the user. Such an account may require registration, fees, and/or a subscription before granting access to a user. Exemplary user accounts may include, but are not limited to, online photo sharing accounts, email accounts, online bank accounts, online credit card accounts, online shopping accounts, podcast accounts, online game accounts, online music accounts, and the like. 
     Turning now to  FIG. 2 , a block diagram is illustrated that shows an overall system architecture  200  for an embodiment of the invention. It will be understood and appreciated by those of ordinary skill in the art that the overall system architecture  200  shown in  FIG. 2  is merely an example of one suitable computing environment and is not intended to suggest any limitation as to the scope of use or functionality of the present invention. Neither should the overall system architecture  200  be interpreted as having any dependency or requirement related to any single component/module or combination of components/modules illustrated therein. 
     With continued reference to  FIG. 2 , an authentication token  205  includes an operating system  210 , a storage module  215 , a connection module  220 , and an applications module  225 . Further, connection module  220  includes a device communication module  230  having a device connection component  235  and a device data transfer component  240 , and a network communication module  245  having a network connection component  250  and a network data transfer component  255 . The storage module  215  further includes user identification data  260 . 
     The device connection component  235  is configured to connect with a NNE device. The device data transfer component  240  is configured to transfer data to and from a NNE device. The network connection component  250  is configured to connect with a network, utilizing a WNA device. The network data transfer component  255  is configured to transfer data to and from the network, utilizing a WNA device. 
     The storage module  215  is used for storing, temporarily or on a longer-term basis, a variety of data, including, but not limited to: data received from the network; data received from the NNE device; data to be sent to the network; and data to be sent to the NNE device. Exemplary data received from the network may include, but is not limited to, a command causing a vending machine to place itself out of service, a command causing a vending machine to modify its prices, a command causing a digital camera to initiate a transfer of digital photographs, a command causing a digital camera to terminate a transfer of digital photographs, and the like. It will be appreciated that any variety of data for configuring the authentication token  205  or NNE device may be received from the network. Exemplary data received from a NNE device may include, but is not limited to, the type of NNE device, status of items contained in a vending machine, results of vending machine self diagnostics, digital photographs from a digital camera, size of digital photographs in a digital camera, and the like. It will be appreciated that any variety of data may be received from the NNE device. 
     Additionally, the storage module  215  stores user identification data in user identification  260 . User identification may include, but is not limited to, user name, password, identification of online accounts, or any other type of profile data to be used in accessing a network or online accounts or services. The authentication token  205  automatically, without user intervention, attempts to connect or logon to the network. At least a portion of the user identification data  260  may be provided to the network by the authentication token  205 , as part of the logon process. The network may determine whether to permit the logon to complete, based on the user identification data. Additionally, the network may use the user identification data to determine what actions the user is authorized to perform on the network. Furthermore, online accounts or applications may grant or deny access or authorization based on the user identification data. 
     The applications module  225  may contain various applications performing such functions as user identity management, password management, network connection management, data processing and data conversion, and the like. For example, applications module  225  may process and convert data received from a NNE device into a more useful or different form to be utilized by the network. Applications module  225  may also process and convert data from the network. 
     Turning now to  FIG. 3 , a flow chart depicts a method  300  for transferring data between a NNE device and a network. Beginning at step  305  the authentication token communicates with a NNE device. The communication may utilize a variety of protocols, including but not limited to, a USB connection and/or protocol. The NNE device may be any device capable of communicating with the authentication token. Exemplary devices may include, but are not limited to, a digital camera, a vending machine, non-network-enabled computers, printers, scanners, or other devices with communication ports capable of transmitting and/or receiving data. 
     Next, at step  310  the authentication token communicates with a WNA device. The communication between the authentication token and the WNA device may utilize a variety of protocols, including but not limited to, a USB connection and/or protocol. The WNA device may be any device with the ability to communicate wirelessly with a network, also possessing a communication port compatible with the authentication token. Exemplary WNA devices may include, but are not limited to, a WiMAX card or a card compatible with WiMAX technology, based on the IEEE 802.16 standard or variations thereof, a WiFi card or a card compatible with WiFi technology, based on the IEEE 802.11 standard or variations thereof, and the like. 
     At step  315 , the authentication token utilizes the WNA device to communicate with the network. The authentication token is capable of utilizing the protocols needed in order to communicate with a compatible network. Exemplary protocols may include, but are not limited to, Internet Protocol. The network may be any type of network capable of being accessed via a WNA device. Exemplary networks may include, but are not limited to, a WiMAX network or a network compatible with WiMAX technology, based on the IEEE 802.16 standard or variations thereof, a WiFi network or a network compatible with WiFi technology, based on the IEEE 802.11 standard or variations thereof, and the like. 
     At step  320 , previously stored data identifying a user is automatically, without user intervention, transferred between the authentication token and at least one online account of a user for an online application or service. The stored data identifying the user serves at least to identify the user to the network in order to gain access to the network. The stored data identifying the user may at least be a portion of a user profile that may include, but is not limited to, information related to user identification, user credentials, username, password, online subscription information, and online account information. The entire user profile may be stored in the authentication token, or a portion of the user profile may be stored in the authentication token with the remaining portion(s) residing elsewhere, for instance, on the network. 
     At step  325 , data is transferred by the authentication token between the NNE device and a user account for an online application or service, utilizing the WNA device. The online application or service may be any application or service capable of residing on a network, including but not limited to, Web applications, e-mail access and Internet access. Exemplary user accounts may include, but are not limited to, any type of online access requiring specific authorization or authentication of a user, before granting access to the user. Such an account may require registration, fees, and/or a subscription before granting access to a user. Exemplary user accounts may include, but are not limited to, an account with an online photo sharing website permitting a user to upload digital images to be displayed on the website. Exemplary user accounts may include, but are not limited to, Hotmail.com, Flickr.com, Kodakgallery.com, MySpace.com, and the like. 
     As mentioned previously, embodiments of the present invention provide apparatuses and methods for wirelessly connecting a NNE device to a network, and for transferring data between the NNE device and the network. An exemplary NNE device may be a digital camera. It may be desirable to transfer images from a digital camera to an account on a network for processing, display, or any number of purposes. An authentication token provides the appropriate communication protocols needed to communicate with a network, using a WNA device. It also provides the appropriate communication protocols to communicate with the camera to retrieve data, such as digital photographs, from the camera. Additionally, it serves to provide user credentials that permit automatic, without user intervention, access to the network and online applications or services. 
     Other examples of a NNE device may include, but are not limited to, a vending machine. It may be desirable to transfer data from a vending machine to an online application or service so that the owner of the vending machine may monitor its status. Exemplary data may include, but is not limited to: number of each type of item remaining in machine; whether machine is out of change; whether money box is full; and results of self-diagnostics. An authentication token provides the appropriate communication protocols needed to communicate with a network, using a WNA device. It also provides the appropriate communication protocols needed to communicate with the vending machine to retrieve status data, or other data, from the machine. Additionally, it serves to provide user credentials that permit access to the network, online applications or services, and/or an online user account. 
     Turning now to  FIG. 4 , a flow chart depicts a method  400  for transferring data from NNE device to a network, utilizing a WNA device. Beginning at step  405 , an authentication token identifying a single user is attached to a WNA device. The attachment may be accomplished by a user connecting a port of the authentication token to a port of the WNA device. At step  410 , the authentication token is attached to a NNE device. The attachment may be accomplished by a user connecting a port of the authentication token to a port of the NNE device. Exemplary ports may include, but are not limited to, USB ports in the form of a male mini-USB connector for coupling with the NNE device and a male USB connector for coupling with the WNA device. Another exemplary port for coupling with the WNA device is a card slot compatible with a personal computer card (PC card). 
     Upon being attached to the WNA device and the NNE device, the authentication token receives data from the NNE device at step  415 . The authentication token then determines the type of the NNE device at step  420 . For example, whether the NNE device is a digital camera, a vending machine, a scanner, etc. This helps the authentication token process data received from the NNE device. For example, digital pictures may be processed differently from vending machine data. At step  425 , the data from the NNE device may be converted into a useful form. User identification data stored in the authentication token is transferred automatically, without user intervention, to the network, utilizing the WNA device at step  430 . Data from the NNE device is transferred at step  435  to the network, and may be transferred to an online user account or service, utilizing the WNA device. 
     Turning now to  FIG. 5 , a flow chart depicts a method  500  for transferring data from a network to a NNE device. At step  505 , the authentication token receives data from the network, utilizing the WNA device. The data is stored and processed by the authentication token at step  510 . The authentication token determines whether the data from the network is to be transferred to the NNE device at step  525 . If so, then the data is transferred to the NNE device at step  530 . Exemplary data to be transferred to the NNE device may include, but is not limited to, a command causing a vending machine to place itself out of service, a command causing a vending machine to modify its prices, a command causing a digital camera to initiate a transfer of digital photographs, a command causing a digital camera to terminate a transfer of digital photographs, and a variety of other data depending on the type of NNE device. Exemplary data from the network may also be retained in the authentication token. For example, updates to stored applications, updates to the operating system, updates to the user profile, updates to configuration data, and a variety of other data, may be stored or retained in the authentication token. 
       FIGS. 6 ,  7 ,  8  and  9  illustrate exemplary perspective views of pocket-size user identification systems. The particular embodiments and configurations herein are intended in all respects to be illustrative rather than restrictive. Alternative embodiments and configurations of a pocket-size user identification system will become apparent to those skilled in the art to which the present invention pertains without departing from its scope. Pocket-size refers to a size that is small enough, or almost small enough, to be carried in someone&#39;s pocket. 
       FIG. 6  depicts a user identification system  600 . The user identification system  600  is but one example of a user identification system and is not intended to suggest any limitation as to the scope of use or functionality of the invention. Neither should the user identification system  600  be interpreted as having any dependency or requirement relating to any one or combination of components/modules illustrated. Continuing with reference to  FIG. 6 , the user identification system  600  includes an authentication token  605  mechanically coupled to a USB network connector  610  and a mini-USB NNE device connector  615 . The USB network connector  610  may couple with a USB WNA device, examples of which may include, but are not limited to, a WiMAX card or a WiFi card. The mini-USB NNE device connector  615  may couple with a NNE device having a USB port, examples of which may include, but are not limited to, a digital camera, a vending machine, non-network-enabled computers, printers, and scanners. 
       FIG. 7  depicts an exemplary user identification system  700 . The user identification system  700  is but one example of a user identification system and is not intended to suggest any limitation as to the scope of use or functionality of the invention. Neither should the user identification system  700  be interpreted as having any dependency or requirement relating to any one or combination of components/modules illustrated. Continuing with reference to  FIG. 7 , the user identification system  700  has an authentication token  705  incorporating a PC card slot network connector  710  and a mini-USB NNE device connector  715 . The PC card slot network connector  710  couples with a PC card compatible WNA device, examples of which may include, but are not limited to, a WiMAX card or a WiFi card. The mini-USB NNE device connector  715  couples with a NNE device having a mini-USB port, examples of which may include, but are not limited to, a digital camera, a vending machine, non-network-enabled computers, printers, and scanners. 
       FIG. 8  depicts a user identification system  800 . The user identification system  800  is but one example of a user identification system and is not intended to suggest any limitation as to the scope of use or functionality of the invention. Neither should the user identification system  800  be interpreted as having any dependency or requirement relating to any one or combination of components/modules illustrated. Continuing with reference to  FIG. 8 , the user identification system  800  includes an authentication token  805  with a mini-USB NNE device connector  815 . The authentication token  805  physically couples with a wireless network access card  820  and electrically couples with the wireless network access card, via a connector  825  and a connector  830 . The connectors  825  and  830  may be any suitable connectors for communicating with the WNA device. Exemplary connectors may include, but are not limited to, male and female USB connectors. The mini-USB NNE device connector  815  couples with a NNE device, examples of which may include, but are not limited to, a digital camera, a vending machine, non-network-enabled computers, printers, and scanners. Examples of a wireless network access card  820  may include, but are not limited to, a WiMAX card or a WiFi card. 
       FIG. 9  depicts a user identification system  900 . The user identification system  900  is but one example of a user identification system and is not intended to suggest any limitation as to the scope of use or functionality of the invention. Neither should the user identification system n  900  be interpreted as having any dependency or requirement relating to any one or combination of components/modules illustrated. Continuing with reference to  FIG. 9 , the user identification system  900  includes an authentication token  905  physically coupled with a wireless network access card  910 . The wireless network access card is depicted having a mini-USB NNE device connector  915 . The mini-USB NNE device connector  915  couples with a NNE device, examples of which may include, but are not limited to, a digital camera, a vending machine, non-network-enabled computers, printers, and scanners. Examples of a wireless network access card  910  may include, but are not limited to, a WiMAX card or a WiFi card. 
     Many different arrangements of the various components depicted, as well as components not shown, are possible without departing from the spirit and scope of the present invention. Embodiments of the present invention have been described with the intent to be illustrative rather than restrictive. Alternative embodiments will become apparent to those skilled in the art that do not depart from its scope. A skilled artisan may develop alternative means of implementing the aforementioned improvements without departing from the scope of the present invention. 
     It will be understood that certain features and subcombinations are of utility and may be employed without reference to other features and subcombinations and are contemplated within the scope of the claims. Not all steps listed in the various figures need be carried out in the specific order described.