Patent ID: 8108903

Claim:
An arrangement for providing an end user at a user station with access to an IP network, the arrangement comprising: an access server of an access network; a web server; an authentication server; and the user station comprising first means for communication with the access server and the web server, and second means for communication with the authentication server over a mobile telecommunications system, wherein the authentication server is connected to the web server, wherein the arrangement performs an access/login procedure comprising a first phase and a second phase, wherein the authentication server controls the first phase, wherein, in the first phase, the arrangement is structured to: at a reception of a login request from the user station, the access server provides a response to the user station enabling activation of a link to the web server and storing login syntax, upon reception of the response from the access server, the user station provides a login message, the link or a button being clicked, including the login syntax of the login message, to the web server, upon reception of the login message from the user station, the webserver requests entry of an end user identity, and upon reception of the end user identity, provides the end user identity to the authentication server, upon reception of the end user identity from the webserver, the authentication server creates a one-time password (OTP) and transfers the OTP to the second means of the user station over the mobile communications system, the web server requests the end user to enter the OTP, and the authentication server verifies a validity of the OTP entered by the end user, and wherein, in the second phase which follows the first phase upon verifying that the OTP entered by the end user is valid, the arrangement is structured to: the authentication server creates temporary user account for which user credentials are defined in order to log in the end user at the access server, and the web server transfers a redirect login message to the user station including the login syntax of the login message to redirect the login to the access server login page, removes/disables the temporary account after a given delay, sets a timer to a given time period during which the user credentials are checked, and if they are not valid, returns an error message to the end user.