DEVICE AND METHOD FOR TELECOMMUNICATION SYSTEMS

Abstract: The present invention relates to a device and a method for a telecommunication system comprising an exchange (1), which comprises a network connection device (6), which provides a user (A) with the possibility to connect a computer (12) to a data network (3), as well as a telephony server (7), which provides said user with the possibility to, during an ongoing data network session, use the service telephony on the same subscriber line (14), which is being used for the data network connection. The invention makes the handling of user information in the exchange (1) more efficient, by providing the network connection device and the telephony server with user information, which is entered in one single user data base (10). The data base is used for operation and maintenance personnel entering static user information and for entering session related user information, which is obtained during one single access control at connection to the data network (3). The information in the data base is accessible to both the network connection device and the telephony server, which makes a second access control, when activating the service telephony during an ongoing data network session unnecessary. The present invention decreases the amount of duplicated user information in the exchange and makes handling of user information in the exchange easier.

Description: Device and method for telecommunication systems Technical field The present invention relates to telecommunication in general and to user information handling in an exchange in particular. Background Today more and more people use the possibility to connect their home computer to the employer's intranet to be able to work from home. Often the companies provide their employee's with user names and passwords, which make it possible to connect to the company's intranet via the company's private branch exchange, PBX (Private Branch Exchange). The connection is done so that the employee calls the exchange, by means of his home computer and a modem, enters his user name and password and after a check of these is permitted access or denied access to the intranet. The check is made, among other things in order to make sure that non-authorised persons do not access internal company information. The international application PCT/SE98/00512 describes a device and a method for connecting a computer to a data network via an exchange. The exchange is equipped with a network connection device that sets up the connection between the computer and the data network. At the establishment ofthe connection, a network address, belonging to the network connection device, is associated with the computer, or more exactly with the telecommunication connection to which the computer is connected. A technology that "doubles" the telephone line has been developed in order for a person having a single telephone line to have his computer connected to a data network, via the telephone network, and simultaneously be able to use the service telephony. The technology is based on the technology to send speech signals, via the data connection, in packets, which follow the standard protocol TCP/IP, i. e. IP-telephony. The TCP/IP protocol is sometimes referred to as the Internet protocol and the data network, which from the beginning used this protocol, is called the Internet. It was originally developed to link computers together within the defence and the educational system in the USA, but has now grown to a global network. Since many intranets of companies and organisations are connected to the Internet, it is possible to consider the Internet as a network consisting of many linked intranets. The service phone doubling, is as mentioned, the service that makes it possible for a subscriber to be connected, via his telephone line, to a data network and simultaneously receive or make phone calls. This service is employed by a subscriber by means of call forwarding calls to his telephone, according to prior art, to a telephone number associated with a particular telephony server. This telephony server stores information about which network address is associated with a computer of a particular user. Calls to and from the subscriber are handled by the telephony server, which has the ability to code and store speech signals in data packets according to the TCP/IP protocol and send these to the computer ofthe subscriber over the existing data connection. Thus, the user uses the computer in stead ofthe ordinary telephone. For this purpose, a telephony application must be run on the user's computer. The telephony application handles inter alia the communication with the telephony server. The international application WO- A 1-97/47 118 describes in detail how a subscriber is given the possibility to telephone during an ongoing Internet-session. A company in which employee's are allowed to work from home can use a Virtual Presence Server alongside the company exchange, as described in the international application WO-A1-97/18 622. The purpose ofthe Virtual Presence Server is to provide an employee with access to all the services, which he has access to at his office, also when he is at home. Another solution for the company is to provide the company exchange with both a network connection device and telephony server to provide the employees with the possibility to connect to the intranet, via the exchange, and simultaneously, under an ongoing intranet session, have the possibility to receive calls to the office at home. The network connection device and the telephony server have each a data base for storing user related information. The operation and maintenance personnel ofthe exchange enter information about valid users in the respective data base, which then is used to allow or deny a user access to the use ofthe network connection device and the telephony server, respectively, with their two corresponding types of services: connection to the intranet via the exchange and doubled telephony. A user employing both types of services must at two occasions send information to the exchange, which then is stored in the data bases in the network connection device and in the telephony server. When connecting to the intranet, the user must first enter user name and password. The network connection device checks this information against the information about valid users that is stored in the data base ofthe network connection device. If the user name and the password are valid, information is stored, in relation to the user name in the user data base ofthe network connection device, about the timeslot which is used for the communication connection with the network connection device and a network address which is allocated to the user to set up the data connection to the intranet. When the telephony application is activated, the information about the user is stored in the user data base ofthe telephony server. The user must when activating the telephony application enter user name and password, which must be checked against the information which is stored in the user data base ofthe telephony server and be accepted as valid, for the activation ofthe service to be allowed. The telephone number, which shall be forwarded, and the network address employed for the data connection are stored in the user data base ofthe telephony server, in relation to the present user name, when the user name has been verified by the telephony server. Since a lot of information, which is stored in the databases ofthe network connection device and ofthe telephony server, is identical, much information is duplicated by this method. Disclosure ofthe invention A private branch exchange which is used to provide a user with the possibility to log in by his home computer, to the company's intranet via the private branch exchange and to provide the users with the service doubled telephony, stores much information twice. The user information must be administered, which implies that a duplication ofthe user information in the exchange often leads to a duplication also ofthe administration of this information. The network connection device is responsible for connecting users via the exchange to the intranet and a telephony server in the exchange is responsible for providing the service doubled telephony. Both the network connection device and the telephony server have user data bases comprising information about which users are allowed to use the respective service, which the network connection device and the telephony server provide, respectively. The operation and maintenance personnel ofthe exchange enter the information about valid users ofthe respective service. If a user has access to both of said services, the information about the user must be stored in both the data base ofthe network connection device and in the database ofthe telephony server, which implies that operation and maintenance personnel must enter the information about the user twice, one time in each ofthe two data bases. A subscriber who wants to employ the two mentioned services; connection of his home computer to the intranet via the exchange and the service of doubled telephony is forced to go through access controls at two occasions. One occurs at the intranet connection and the other occurs at the activation ofthe service doubled telephony. At both controls, the user identity ofthe subscriber is checked. A valid user is permitted access to the intranet and the service, whereas a non- valid user is denied the same. After that the user is approved, the information about the user is stored in one of said user data bases. At the connection to the intranet, the information is stored in the user data base associated with the network connection device. At activation ofthe service doubled telephony, it is the user data base ofthe telephony server that stores information about the user. The information that is stored in the two user data bases is to a great extent the same. Thus, a problem that exists with the technology and the method as described above, is that much ofthe information is duplicated in the exchange. Another problem is that the administration ofthe user information becomes extensive. The operation and maintenance personnel must several times enter identical information twice and the subscriber is forced to go through two at least partly identical access controls when using the services connection to the intranet via the exchange and duplicated telephony. At the access controls, information entered by the user is checked against the information entered by the operation and maintenance personnel. It would be desirable with only one control. The present invention solves the above mentioned problem by entering the user information, which the network connection device and the telephony server use, in a common data base, where it then is accessible to both units. The operation and maintenance personnel enter information about the users ofthe services ofthe exchange in the common data base. This information can comprise restrictions on a user's rights to use any or both ofthe services doubled telephony and connection to the intranet over the exchange. From the data base, the telephony server is provided the user information that has become known in connection with the access control at the connection to the intranet. Since the identity of the user already has been verified in the access control to the intranet, a second access control and information collection during activation ofthe service doubled telephony is not necessary. The information already known about the identity ofthe user can be used for permitting or denying access to the service doubled telephony. The user information, which the telephony server uses, is obtained from the user information earlier stored in connection with the intranet connection. According to a preferred embodiment ofthe invention, the network connection device and the telephony server are integrated. Then, they form a single unit having an associated user data base, into which user information is entered, which shall be compared to two user data bases required today. According to another embodiment ofthe invention, the data bases ofthe network connection device and ofthe telephony server are integrated with the user data base ofthe exchange. Thus, the invention reduces the amount of duplicated user information in the exchange. The invention has the advantage that it makes the operation and maintenance more simple for the personnel, who do not have to enter the information several times and for the user who does not have to go through two access controls with entering of user identities and other requested information. Yet another advantage is that the equipment ofthe exchange can be made simpler, having considerably reduced administration ofthe user information, in particular for the telephony server. The telephony server can be integrated with the network connection device. Yet another advantage is that the duplicated information in the exchange is decreased. Depending on how the information is stored, the invention can imply a saving in memory and in execution time during storing of information. The object ofthe invention is to simplify the methods for connection to a company's intranet and the use ofthe service doubled telephony via a private branch exchange. The methods are simplified, from the user's point of view as well as from the point of view of operation and maintenance personnel. The object is further to simplify the equipment, which is required in an exchange for providing the services connection to a data network via the exchange and doubled telephony. The simplification in the exchange is particularly based on that the amount of duplicated information is decreased. The invention will now be described by preferred embodiments with reference to the accompanying drawing figures. Brief description ofthe drawings Fig. 1 illustrates a block schematic of an exchange according to the invention and the units, which co-operate with the exchange in a telecommunication system, Fig. 2 illustrates a block schematic of a data base in the exchange illustrated in Fig. 1, Fig. 3 illustrates a block schematic of an alternative embodiment of an exchange according to the invention and the units that co-operate with the exchange, Fig. 4 illustrates a block schematic of an alternative embodiment of an exchange and the units that co-operate with the exchange, Fig. 5 illustrates a flow sheet of a method for registering of a new valid user according to the invention, Fig. 6 illustrates a flow sheet of a method for connecting a computer to a data network according to the invention, Fig. 7 illustrates a flow sheet of a method for activating, according to the invention, the service doubled telephony, Fig. 8 illustrates a flow sheet of a method, according to the invention, for handling incoming calls to a user having activated the service doubled telephony, Fig. 9 illustrates a flow sheet of a method, according to the invention, for handling outgoing calls from a user having activated the service doubled telephony, Fig. 10 illustrates a flow sheet of a method, according to the invention, for deactivating the service doubled telephony, Fig. 11 illustrates a flow sheet of a method, according to the invention, for disconnecting a data network connection. Description of preferred embodiments Fig. 1 illustrates an exchange 1 (PBX) connected between a public telephone network 2 (PSTN) and a data network 3 in the form of an intranet. The intranet 3 is in turn connected to another data network 4 in the form ofthe Internet. The exchange 1 comprises an switch core 5 which is connected to the public network 2 and a network connection device 6 which is connected between the switch core 5 and the intranet 3. A telephony server 7 is connected to the switch core 5 and the network connection device 6. An exchange control means 8 is connected to the switch core 5, the network connection device 6 and the telephony server 7. The network connection device 7 comprises access control means 9 for identity check of users who want access to some ofthe services provided by the exchange. The telephony server 7 and the network connection device 6 are connected to a data base 10 for storing user information. A user A has a telephone 11 and a personal computer 12 connected to the telephone network 2 via a modem 13 and a subscriber line 14. By the means ofthe personal computer 12 and the modem 13, it is possible for the user A to establish a data connection 15 with the intranet 3 and possibly also with the Internet 4 via the exchange 1. It is possible to activate a telephony application 16 on the personal computer 12. A telephone 17 is directly connected to the exchange 1 and is allocated a telephone number No(V). The intranet 3 can be implemented in some local network such as a LAN (Local Area Network) ofthe type Ethernet or Token Ring. The connection 18 between the telephone network 2 and the switch core 5 is preferably a telephone line over which digital telecommunication signals are transported in the form of PCM signals in frames and timeslots according to technology known to a person skilled in the art. To the control means ofthe exchange 8, a terminal 19 is connected by means of a connection 19a. The terminal is used by the operation and maintenance personnel ofthe exchange for entering user data in the data base 10. The information which the personnel enter into the data base is for instance user names 101a, 101b, passwords 102a, 102b for valid users and the user's access rights 103a, 103b to the services connection ofthe intranet via the exchange and doubled telephony, as illustrated in Fig. 2. Physically, a connection 7a between the telephony server 7 and the network connection device 6 can go via for instance the intranet 3. According to the logical schematic way of illustration shown in Fig. 1, the connection 7a is regarded as a direct connection independent on the underlying physical implementation. The same relates to the connection 19a between the terminal 19 and the exchange control means 8, which physically can be a direct connection or an indirect connection via for instance the intranet 3 or the switch core 5 and PSTN 2. In Fig. 1 the terminal 19 is logically shown as directly connected to the exchange control means 8. The exchange 1 makes it possible for the user A to connect his personal computer 12 to the intranet 3 and use the service doubled telephony, i. e. the service that makes it possible for a subscriber to be connected, via his telephone line, to a data network and at the same time receive or make telephone calls. It is assumed in the example, that the telephone 11 is the user's A home telephone, the personal computer 12 is the user's home computer and the telephone 17 is the user's A office telephone. It is further assumed that the user A wants to have his personal computer 12 connected to the intranet 3 and simultaneously, by means ofthe service doubled telephony, have the possibility to receive calls to the telephone number No(V), i. e. calls to the telephone 17 at the user's office. The connection to the intranet 3, i. e. the establishment ofthe data connection 15 between the personal computer 12 and the intranet, is handled by the network connection device 6. At the establishment ofthe data connection 15, a network address N, belonging to the network connection device, is associated with the personal computer 12, or more precisely with the subscriber line 14 to which the computer is connected. To activate the service doubled telephony, the user A uses the telephony application 16. The telephony application 16 forwards the telephone number No(V) according to prior art, for instance CSTA (Computer Supported Telephony Application), to a telephone number No(S) associated with the telephony server 7. Thereby, the telephony server becomes the receiver of an incoming call to the telephone number No(V). The telephony server 7 communicates with the telephony application 16 over the established data connection 15 and informs, by means of this connection, the user about the incoming call through a message on the user's personal computer 12. If the user A chooses to take the call, the telephony server sees to it that speech information is sent as IP-signals over the established data connection 15. The user employs the telephony application 16 and the computer's equipment, such as sound cards, speakers and microphone, in order to communicate. Also outgoing calls during an ongoing intranet session are made by means ofthe personal computer 12 over the existing data connection 15 and are handled by the telephony application 16 and the telephony server 7. To only allow the subscribers with authorisation access to the intranet 3 and the possibility to use the service doubled telephony, the user must go through an identity check, also called access control. For this purpose authorised users are provided with a user name and a password. The data base 10 comprises user profiles UPl, UP2 for all valid users, as illustrated in Fig. 2. The user profiles comprises information stored by the operation and maintenance personnel about the user's user names, 101a, 101b, password 102a, 102b, access rights 103a, 103b to the services ofthe exchange, connection to the intranet via the exchange and doubled telephony, and according to the example, a connection number 104a, 104b in the exchange related to the user. Before a user, for instance the user A having the profile UPl, is allowed to connect to the intranet 3, the exchange 1 requests the user name and the password. The validity of these is controlled against the register 10 ofthe data base having the valid user names 101a, 101b and the corresponding passwords 102a, 102b. An approved user is permitted access to the intranet 3, while a non-approved user is denied the same. According to the example, the user name 101a and the password 101b of the user A are present in the same user profile UPl, which leads to an approval when the user enters these. The approved user is also permitted access to the service doubled telephony if it is allowed according to the user's user profile. Information about the user that is necessary for providing the services ofthe exchange is stored in connection with the access control. The user enters parts ofthe necessary information. Other parts are received by the exchange automatically, for instance by signalling. Both the network connection device 6 and the telephony server 7 are dependent on user- based information in the form of the verified user name 101a and the network address N that is associated with the data connection 15. The network connection device 6 is also dependent on information about the timeslot Ts(A) for the connection 15 to the switch core. The telephony server 7 is also dependent on information on the number that is forwarded No(V) when using the service doubled telephony. According to this embodiment ofthe invention, the telephone number to be forwarded is the connection number 104a in the exchange, which is related to the present user name 101a of the user A, and the number is obtained from the user profile UPl in the data base 10. In Fig. 1, the data base 10 is common for the network connection device 6 and the telephony server 7 and is used for storing said required user information: the user name 101a, the password 102a, the access rights 103 a, the telephone number 104a, the network address N and the timeslot Ts(A), as illustrated in Fig. 2. According to prior art, the telephony server and the network connection device are each provided with a respective data base which store user information in connection with two different access controls. The prior art leads to that, to some extent, identical information is retrieved at two occasions and stored in two data bases, having duplicated information, in the exchange. According to the embodiment ofthe invention described in Fig. 1, the exchange 1 has the only data base 10 for storing the user information that the network connection device 6 and the telephony server 7 require. Thus, the invention reduces the amount of duplicated information compared to prior art. The static user information, such as the user name 101a, the password 102a and the access rights 103 a are entered in the data base 10 by means ofthe terminal 19 by the operation and maintenance personnel. Thus, the operation and maintenance personnel enters the information about a user ofthe services connection to the intranet via the exchange and doubled telephony in the single data base 10, which can be compared to prior art, when the information was entered in two data bases. The session related information, such as the network address N and the timeslot Ts(A), is collected and stored in the data base 10 at the access control in connection with the connection to the intranet 3. A second collection of information in connection to the service doubled telephony is not performed. Fig. 3 illustrates an alternative embodiment ofthe invention. An exchange 1 A comprises, according to this embodiment, in addition to the exchange control means 8 and the switch core 5, an integrated telephony server and network connection device 20, comprising a data base 21 for storing user information. The integrated unit 20 handles both the establishment ofthe data connection 15 to the intranet 3 and the provision ofthe service doubled telephony. For connecting the user A to the intranet 3, an access control is performed, whereby information entered by the user is checked against the user information stored in the data base 21. After the access control is finished, the above mentioned required user information, the network address N and the timeslot Ts(A), and in some cases also the telephone number ofthe subscriber line 14, are stored in the data base 21. At activation ofthe service doubled telephony, the subscriber's calls are forwarded to a telephone number associated with the integrated unit 20. The exchange 1 A has the terminal 19 connected to the switch core via the connection 19b. Fig. 4 illustrates yet another alternative embodiment ofthe invention, in which an exchange IB comprises a network connection device 22 comprising a data base 23. The data base 23 is used for storing the user information that the telephony server 7 and the network connection device 22 require. The telephony server 7 is provided with the user information it requires from the data base 23 ofthe network connection device. There are a number of different alternatives for how the telephony server is provided with the information from the data base 23. The telephony server can for instance have access to the data base to retrieve the information it needs by it self. Another example is that the telephony server 7 sends a request to the network connection device, which then responds by sending the requested information in a message to the telephony server. If the distribution of information to the telephony server is provided by communication between the telephony server and the network connection device, this communication can for instance be handled by means of signalling via a master program in the exchange control means 8. Yet an embodiment ofthe invention is to let the network connection device 22 provide the telephony server 7 with a copy of its data base 23. Then, the telephony server has to receive updated copies ofthe data base 23 as soon as any change occurs therein, alternatively request an updated copy at each occasion when the telephony server uses user information. Yet another embodiment is to store the user information that the telephony server 7 and the network connection device 6, or the integrated unit 20 use in the user data base ofthe exchange 8a in the exchange control means 8. The data base ofthe exchange 8a stores for instance user profiles with information about the user's user name, connection number in the exchange and rights to make outgoing calls. The user profiles in the user data base 8a ofthe exchange can be supplemented with the information that particularly is needed for providing the services intranet connection via the exchange and doubled telephony. Thus, this embodiment require communication between the exchange control means 8 and one ofthe units the network connection device 6, the telephony server 7 or the integrated unit 20 for transferring the user information. Neither the telephony server 7, the network connection device 6, nor the integrated unit 20 require any particular data base for storing user information, since it is stored in the data base 8a in the exchange control means 8. The way, according to which an embodiment ofthe invention operates, will now be described with reference to Fig. 1. Registration of a new user How registration of a new user is performed, is described with reference to the flow sheet in Fig. 5 and with reference to Fig. 1. The user A shall be registrated as a valid user ofthe service which provides the user with the possibility to connect to the intranet 3 via the exchange 1 and the service doubled telephony that is provided by the telephony server 7. Operation and maintenance personnel, enters via the terminal 19 the user's A user name 101a, password 102a and access rights 103a, and according to the example also the user's A telephone number in the exchange 104a, i. e. the user's office number No(V), step 28. Thereafter, the operation and maintenance personnel gives an order, via the terminal 19, that a user profile UPl for the user A shall be created in the data base 10, in which the entered information will be stored, step 29. After the storing ofthe user's A user profile in the data base 10, A has the possibility to both use the service connection to the intranet 3 and the service doubled telephony, since the user's rights 103a to both of these services are stored in the user profile UPl in the data base 10. Connection to the intranet How connection to the intranet is performed, is described with reference to the flow sheet in Fig. 6 and with reference to Fig. 1. The user a wants to connect his computer 12 to the intranet 3 by means ofthe modem 13, which is connected to the user's subscriber line 14. Therefore, the user A calls a particular number No(D) by which he can get access to the intranet 3 via the exchange 1. By calling that number, the user A requests connection to the intranet. This particular number is directly associated with the network connection device 6, which means that the network connection device immediately receives the user's request about a data connection to the intranet, step 30. The establishment of a connection through the exchange, under the control ofthe exchange control means 8, is performed in a way that is known to a person skilled in the art. The access control means 9 ofthe network connection device starts at a received request about intranet connection, an access control, step 31. In the access control, the user enters his allotted user name 101a with corresponding password 102a. The entered user name and the password are compared to said user profiles in the data base 10, in which valid combinations of user names and passwords are stored, according to Fig. 2. If the given combination of user name and password turns out to be valid, the user is approved and the connection is permitted. A non-approved user is denied connection and thereby denied access to the intranet, step 33. If user A is approved in the access control, the data connection to the intranet is set up and information about the timeslot Ts(A) used for the connection to the switch core and the network address N being associated with the data connection is stored in the data base 10 in the user profile UPl, step 34. The user's A data connection 15 to the intranet is thereby set up and can be used for transporting data according to a method known to a person skilled in the art. Activation ofthe service doubled telephony How activation ofthe service doubled telephony is performed, is described with reference to the flow sheet in Fig. 7 and with reference to Fig. 1. The user A has connected his personal computer 12 to the intranet 3 via his subscriber line 14. To be able to use the subscriber line for telephony during the intranet session, the user A wants to activate the service doubled telephony. Therefore, the user starts the telephony application 16 on his personal computer 12. The telephony application establishes an IP-connection with the telephony server 7 over the already established data connection 15 and the IP-link 24, step 35. The telephony server 7 is informed by the telephony application 16 that user A wants to have incoming calls forwarded to the telephone number No(S) ofthe telephony server. The telephony server 7 searches in the data base 10 for the user name 101a of the user that uses the data connection 15 over which the call forwarding order was arrived. The telephony server can thereafter from the user profile UPl obtain the connection number 104a in the exchange which is associated with the user name 101a and thus is the telephone number which shall be forwarded, step 36. In the example, the telephone number 104a in the user profile is the same as the telephone number No(V), whereby the reference numerals No(V) are used for the forwarded number from now on. The telephony server 7 connects, for user A, the service call forwarding to the number No(S) ofthe telephony server, step 37. No access control is performed in connection with the connection ofthe service doubled telephony. The identity ofthe user A, has already been verified in connection with the connection to the intranet 3, thus making a second access control unnecessary. Incoming calls How incoming calls are handled, is described with reference to the flow sheet in Fig. 8 and with reference to Fig. 1. After activation ofthe service doubled telephony, all incoming calls to user A on the telephone number No(V) are routed to the telephony server 7. The telephony server receives the call having information about the telephone number the called party wants to call (i. e. No(V)), step 38. The telephony server 7 searches in the data base 10 which IP- address presently is associated with that number, i. e. the network address N being stored in the user profile UPl, thus giving information that the user A is allocated the data connection 15. The telephony server creates a relation between the incoming call and the network address N, step 39. Then, the telephony server sends a message to the user A over the data connection 15 and the IP-link 24 that a call is waiting, step 40. The user A can choose to take the call, dismiss it or request the telephony server to forward the call to for instance a voice mailbox. The user A informs, via the telephony application 16 and the data connection 15, the telephony server 7 of its choice, step 41. If the message implies that the call shall be dismissed or re-routed, the telephony server 7 handles this, step 42. If the user chooses to take the call, the telephony server provides that the communicating parties' speech information is compressed and packetised and sent over the data connection according to prior art, step 43. This can be done without interrupting the intranet session ofthe user A. Outgoing calls How outgoing calls are handled, is described with reference to the flow sheet in Fig. 9 and with reference to Fig. 1. It is assumed that the user A has an ongoing intranet session and has activated the service doubled telephony, as described above. Furthermore, it is assumed that the user A wants to make an outgoing call. The user A now dials the telephone number he wants to call using the keyboard ofthe personal computer and requests the telephony application 16 to initiate an outgoing call. The telephony application answers by in turn sending a request to the telephony server 7, over the established data connection 15 and the IP-link 24, of making an outgoing call to the wanted number, step 44. The telephony server starts, when the request to make an outgoing call is received, to search in the data base 10 for the user name 101a, which is associated with the network address N being used for the data connection 15 over which the order about the outgoing call was received, step 45. Thereafter, are the access rights 103 a, in the same user profile UP2 as the user name, examined to check if the present user is allowed to make the requested call, step 46. If the examination shows that authorisation is missing, the user A is denied the call, step 48. If there is no restriction on user A for the requested call, the set-up ofthe call is allowed to continue. The telephony server chooses a line to the network 2, via the switch core 5, and initiates that the requested number is called, step 49. The called party answers and the telephony server handles compression and packeting ofthe speech information ofthe parties and send this information over the data connection 15 in the form of IP-signals as described above. The call is charged to the forwarded number No(V), i. e. in the example to the connection number 104a in the exchange that is associated to the user A. The control ofthe authorisation of user A to make the requested outgoing call, described above, is optional and can be excluded. Even if the control of restrictions associated with a particular user name is excluded, the telephony server has to obtain information from the data base 10 to be able to find the telephone number to which the call shall be charged. Deactivation ofthe service doubled telephony How deactivation ofthe service doubled telephony is performed, is described with reference to the flow sheet in Fig. 10 and with reference to Fig. 1. In order to deactivate the service doubled telephony, the user A requests the telephony application 16 to be shut down. This application requests the telephony server 7 to release the forwarding ofthe user's A calls to the number No(V), step 50. The telephony server searches in the data base 10 for the user name 101a associated with the data connection 15 over which the request has arrived and then receives from the current user's A user profile UPl, the number 104a, herein No(V), for which the call forwarding shall be released, step 51. The telephony server 7 disconnects the call forwarding service, step 52. The information in the data base 10 does not change due to the deactivation ofthe service doubled telephony. The information that is stored in the data base 10 has to be accessible to the network connection device 6 as long as the intranet connection remains. Disconnection from the intranet How disconnection from the intranet is performed, is described with reference to the flow sheet in Fig. 11 and with reference to Fig. 1. When a user A wants to terminate his ongoing intranet session, he requests the modem to shut down the connection. When the network connection device 6 discovers that the connection is down, it understands this as an order of disconnection, step 52, and removes the established data connection 15, step 53, and deletes in the data base 10, the network address N and the timeslot Ts(A) which was used for the data connection, step 54. The above described method for activation ofthe service doubled telephony, is based on that the telephony server 7 initiates the call forwarding ofthe user's A calls. In the example, the telephone number that is to be forwarded No(V) is a number corresponding to the exchange 1, which means that the call forwarding of calls from number No(V) to number No(S) is an internal call forwarding in the exchange. However, it is not necessary that it is one ofthe numbers in the exchange that is forwarded to the telephony server 7. The forwarded number can also be a number outside the exchange, such as the home telephone number No(A) ofthe user A, which implies that the call forwarding service must be activated outside the exchange 1, in the telephone network 2. An alternative is then that the user A himself initiates the call forwarding in the telephone network 2 to the telephone number No(S), using the touch-tone telephone 11, according to a prior art method. This call forwarding must then be done before the user A connects to the intranet 3, via his subscriber line 14. When the user A starts the telephony application 16 and activates the service doubled telephony, the telephony server does not have to do anything if the user already has initiated the call forwarding. It is usually desirable to test the connection between the telephony application 16 and the telephony server 7 by letting the telephony application send an inquiry to the telephony server, which answers, provided that the connection is correct. If the telephony application does not receive an answer from the telephony server, it can inform the user that contact could not be established with the telephony server. A reason for why the user A should be forced to initiate the call forwarding, could be that the telephony server 7 does not have permission to initiate the call forwarding in the telephone network 2. To summarise, there are thus a number of possibilities to handle the call forwarding in connection with the use ofthe service doubled telephony. The call forwarding can be done manually in a traditional way by the user A or automatically by means ofthe telephony server 7. The user A can also have a standing call forwarding to the telephony server's number No(S) when the telephone number No(A) is busy. It is notable that the user A can choose not to forward his calls to the telephony server 7 if he does not use the service doubled telephony during an ongoing intranet connection. The user's A rights can also be such that he does not have permission to use doubled telephony. According to the invention, the identity ofthe user is; however, stored in the same data base 8a, 10, 21, 23 independent of whether or not the user has a right to use the service doubled telephony or not. As described above, it is not necessary that the number which is forwarded to the number No(S) ofthe telephony server is a number which is directly associated with the exchange 1. A possible situation is, as mentioned, that the user wants the calls to the telephone number No(A) shall be transferred to the telephony server No(S), i. e. the calls to the home telephone ofthe user A. To be able to receive also the calls to the office telephone having the number No(V), the user may first forward the calls ofthe number No(V) to the number No(A). Thus, the calls to the telephone number No(V) will also be forwarded to the number No(S) ofthe telephony server, by first being forwarded to the number No(A), which in turn is forwarded to the number No(S). In order for the telephony server 7 to be able to inform the right user about an incoming call, or more precisely send the acknowledgement ofthe incoming call to the right data network address, it must be able to associate the calls to the number No(A) with the network address N. An alternative is to let the user profile UPl ofthe user A contain information about that the number No(A) is associated with the user name ofthe user A. However, this procedure gives the user little freedom in the way that he only can forward the numbers that are registered in his user profile UPl. Another alternative is to store the telephone number No(A), which is associated with the subscriber line 14 via which the user A performs his intranet connection, in the data base 10 at the time when the connection is set up. At the connection, the number No(A) is sent automatically, whereby no additional dialogue is required between the user A and the exchange 1, 1A, IB for this purpose. The telephone number No(A) stored in the data base 10 is thereafter treated as session related information which is entered and thereafter deleted in connection to connection and disconnection to the intranet. The information about the incoming call is sent right owing to that the telephony server 7 searches in the data base 10 for the telephone number No(A) and sends the information about the incoming call to the network address N that for the moment is associated with the telephone number No(A) by being stored in the user profile UP 1 together with No(A). Above, methods according to the invention have been described in connection to different events with reference to the exchange 1 ofthe invention, which is illustrated in Fig. 1. The methods for the alternative embodiments, which are illustrated in Fig. 3 and 4, differ slightly from the above described methods with reference to Fig. 1. These differences are described below. For an exchange 1 A according to the invention, as illustrated in Fig. 3, the methods differ from those described above in such a way that the integrated unit 20 performs the steps, which according to the description with reference to Fig. 1 are performed by the telephony server 7 or the network connection device 6. The user information is stored, retrieved and deleted in the data base 21 instead ofthe data base 10. The network cormection device 22 in the exchange IB according to the invention, which is illustrated in Fig. 4, has a data base 23 for storing user information. The data base 23 corresponds to the data base 10 in Fig. 1, which is separated from the network connection device 6. In connection with connection to the intranet 3, via an exchange as illustrated in Fig. 4, the user information is stored in the data base 23 in the network connection device 22. When activating the service doubled telephony, the telephony server 7 has to obtain user information from the data base 23 in the network connection device 22. The information can for instance be transported by means of signalling between the telephony server 7 and the network connection device 22. Also in connection with the handling of incoming calls, outgoing calls and deactivation ofthe service of doubled telephony, the telephony server 7 must obtain user information from the data base 23 ofthe network connection device. When disconnecting the data connection 15, the network connection device 22 deletes the user information in the data base 23. In order for the communication between the telephony server 7 and the telephony application 16, over the data connection 15, to work, it is in some cases necessary to inform which port number the telephony application is associated with. This is the case if the port number is variable. If the port number is fixed, no information regarding this has to be exchanged, since the telephony server knows that the port number is always the same. When the port number is variable, it can be stored as session related information in the data base 8a, 10, 21, 23. This information is entered in the data base in connection with the activation ofthe service doubled telephony and is deleted in connection with the deactivation of this service. It is the telephony application that, without the user having to enter anything, informs the telephony server which port number it uses. The telephony server provides that the port number is stored temporarily in the data base 8a, 10, 21, 23 in the right user profile. The user information that is used for supporting the services connection to the data network via the exchange and doubled telephony are entered and stored in the data base 8a, 10, 21,23. The information in the data base may vary. Above, it is mentioned that the user's user name, password, access rights, forwarded number, the timeslot and the network address, which is used for the present data connection, and in some cases a port number are stored in the data base. The forwarded telephone number can be treated as static information that is entered by the operation and maintenance personnel, if it for instance is so that the user only is permitted to use doubled telephony in order to be able to receive the calls to his office telephone. An alternative is that the telephone number is treated as session related information and consists ofthe number associated with the subscriber line via which the user is connected to the intranet, such as described above. The user is, by this, given greater flexibility since he can use the service doubled telephony for calls to an optional telephone number. Yet another alternative is that several telephone numbers associated with the user are forwarded to the telephony server. These telephone numbers are stored in the user profile in the same way as when only one number is forwarded. The telephone numbers can be stored as session related or static information and the user profile can thereby simultaneously contain both telephone numbers stored as static information and telephone numbers stored as session related information. It is not necessary that the password and the access rights are stored in the data base. It is for instance possible that the exchange has a very simple access control, wherein all users giving a valid user name are given access to all ofthe services ofthe exchange. Today, it has become common that information being sent over data and communication connections is encrypted to avoid bugging. Alternative access controls to the more traditional, in which user names and passwords are used have been developed. The identity of a user can be controlled according to an encryption procedure, in one or several steps, in which the user in a dialogue with the exchange can be verified by the user sending messages to the exchange, by means of an encryption key, which is used for verifying the user's identity. Thus, the invention is not limited to traditional access controls having traditional user names and passwords in the form of static letter or number combinations. Independent of which type of identification method is used, information about the identity ofthe user is stored, according to the invention, in the data base 8a, 10, 21, 23 and is treated as some kind of user name independent of whether this information is in the form ofthe name ofthe user, an encryption key or the user's connection number in the exchange.

Claims: Claims 1. A telecommunication system comprising an exchange (1, 1 A, IB) for providing the service of connecting a computer (12) to a data network (3) via a data connection (15) through said exchange and for providing the service telephony to a user (A) on the same communication connection (14), which is used for the established data connection, which exchange comprises : -access control means (9) for identification ofthe user; and -at least one data base (8a, 10, 21, 23) for storing user-related information; and which telecommunication system further comprises -at least one terminal (19) for entering information for storing in the data base, characterised in that the exchange has means for storing information entered once via the terminal (19) in the data base, which information comprises the information (101a, 102a, 103 a, 104a) about the identity ofthe user (A) which is required for identification ofthe user (A) when using said services, and for control ofthe user's rights to use said services. 2. A telecommunication system according to claim 1, characterised in that the exchange comprises means for checking the identity ofthe user (A) at one single occasion in connection with a data network session, which session comprises the establishment of said data connection (15) and activation of a service which gives the user the possibility to use the service telephony on the same communication connection (14) which is used for the data connection. 3. A telecommunication system according to claim 1 or 2, characterised in that the exchange comprises a network connection device (6, 22) responsible for the establishment ofthe data connection (15) between the computer (12) and the data network (3) via the exchange (1, IB) and a telephony server (7) responsible for providing the service telephony to the user (A) when the user is connected to the data network (3). 4. A telecommunication system according to claim 3, characterised in that the exchange comprises a common data base (10) for the network connection device (6) and for the telephony server (7), in which database at least said user-related information, which is entered via the terminal (19) and obtained in connection with the data network session, is stored. 5. A telecommunication system according to claim 3, characterised in that the network connection device (22) comprises a data base (23), wherein stored information is accessible to the telephony server (7), which information stored in the data base comprises at least said user-related information, which is entered via the terminal (19) and obtained in connection with the data network session. 6. A telecommunication system according to claim 1 or 2, characterised in that the exchange (1 A) comprises an integrated unit (20) responsible both for the establishment ofthe data connection (15) between the computer (12) and the data network (3) via the exchange (1A), and for providing the service telephony to the user (A), when the user is connected to the data network (3). 7. A telecommunication system according to claim 6, characterised in that the integrated unit (20) comprises a data base (21), in which at least said user-related information, which is entered via the terminal (19) and obtained in connection with the data network session, is stored. 8. A telecommunication system according to claim 3 or 6, characterised in that an exchange control means (8), which at least controls the establishment of telecommunication connections between the user (A) and the exchange, comprises a database (8a) in which at least said user-related information, which is entered via the terminal (19) and obtained in connection with the data network session, is stored. 9. A method in a telecommunication system comprising an exchange (1, 1A, IB), which telecommunication system further comprises a terminal (19) connected to the exchange, a data network (3) and a user (A) having a computer (12), which exchange provides the user (A) with the possibility to set up a data connection (15) between the computer (12) and the data network (3), via means in the exchange, and to use the service telephony on the same communication connection (14) which is used for the possibly established data connection (15), which method comprises registration ofthe user (A) of said services data network connection and telephony, which registration comprises: -entering information about the user (A) on the terminal (19); -storing said information about the user in the exchange (1, 1A, IB), characterised in that said information about the user is entered on the terminal (19) one single time, and in that said entered information, at least initially, is stored in one single data base (8a, 10, 21, 23) in the exchange (1, 1A, IB). 10. A method in a telecommunication system comprising an exchange (1, 1 A, IB), which telecommunication system further comprises a data network (3) and a user having a computer (12), which method comprises: -establishing a data connection (15) through the exchange for connecting a user's computer (12) to the data network (3); -providing the user (A), when he is connected to the data network (3), with the possibility to, by means (7, 20) in the exchange (1, 1A, IB), use the service telephony on the same communication connection (14), which is used for the established data connection (15); -access control for identification ofthe user (A) executed by an access control means (9) in the exchange (1, 1A, IB); -storing user related information in at least one data base (8a, 10, 21, 23) in the exchange (1, 1A, IB), characterised in that the identity ofthe user is checked at one single occasion in connection with a data network session, which session comprises the establishment of said data connection (15) and the activation of a service which provides the user with said possibility to use the service telephony. 11. A method in a telecommunication system comprising an exchange (1, 1A, IB) according to claim 10, characterised in that the identity ofthe user is checked before the data connection (15) is established. 12. A method in a telecommunication system comprising an exchange (1, 1A, IB) according to claim 10 or 11, characterised in that the identity ofthe user (A) is checked by means of a user name and a password stated by the user, which username and password are checked against valid user names (101a, 101b) and passwords (102a, 102b), stored in the data base (8, 10, 21, 23) in the exchange (1, 1A, IB), whereby the user (A) is only permitted the data connection (15) to the data network (3) when the user name and the password, which the user has stated, correspond to any ofthe valid user names (101a, 101b) and passwords (102a, 102b) stored in the data base (8, 10, 21, 23). 13. A method in a telecommunication system comprising an exchange (1, 1A, IB), according to claim 10, 11 or 12, characterised in that information about the data connection (15) is stored in the data base (8, 10, 21, 23) in the exchange (1, 1A, IB) in connection with the establishment ofthe data connection (15), and in that no information about the data connection (15) is stored in connection with the activation ofthe service, which provides the user (A) with the possibility to use the service telephony on the same communication connection (14) which is used by the data connection (15). 4. A method in a telecommunication system comprising an exchange (1, 1A, IB), according to claim 13, characterised in that the information about the data connection (15) is deleted from the data base (8a, 10, 21, 23) in connection with disconnection of the data connection (15), and that no information is deleted from the data base (8a, 10, 21, 23) in connection with the deactivation ofthe service which provides the user (A) with the possibility to use the service telephony on the same communication connection (14) which is used by the data connection (15).

Inventors: ANDREASON TOMAS, ANDREASON, TOMAS
Applicants: ANDREASON TOMAS, ERICSSON TELEFON AB L M, ANDREASON, TOMAS, TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
Application year: 2000
Main classification: H04M
IPC codes: H04M3, H04M11