WO2001013197A2

WO2001013197A2 - Method of distributing filtering network access system

Info

Publication number: WO2001013197A2
Application number: PCT/US2000/040623
Authority: WO
Inventors: Joseph A. Sarcinella
Original assignee: Sarcinella Joseph A
Priority date: 1999-08-12
Filing date: 2000-08-10
Publication date: 2001-02-22
Also published as: WO2001013197A3; WO2001013197A9; WO2001013197A8

Abstract

A method of marketing and selling a filtering network access services to subscribers in a multi-tiered distribution chain. Special interest groups distribute the network service provider's browser software to users and receive a portion of the subscription fee for registering each user. The filtering system (100) comprises a network filter and a user filter resident in the subscriber's terminal (200). The network filter is implemented with servers (110), user databases (120), filter databases (130) all connected to each other via network (190). Each subscriber logs onto his ISP by establishing a connection between his terminal (200) and the network servers (110) via a dial-up connection (140), via LAN router (150) or other comparable means. The network servers (110) are connected to the Internet or other network (160) through a firewall router (170). A WWW and file transmission protocol server (180) may be separately connected to the Internet (160) through the firewall router (170). Network server (110) may represent an ISP.

Description

METHOD OF DISTRIBUTING NETWORK ACCESS SYSTEM BACKGROUND OF THE INVENTION

The present invention relates to a method and a system for marketing and distributing a network access system in a multi-tiered distribution channel. Particularly, the present invention relates to a technique and system for marketing a network access or filtering system, such as a web browser system that filters or restricts access to unsuitable web sites on the Internet.

Traditionally, the network access or filtered access providers have distributed their network access software, i.e., web browser, directly to the consumer indiscriminately with little success. Except AOL, the network access providers have not received a large public acceptance because of their poor marketing scheme. However, none of the present network access or filtered access provider, i.e., Internet service provider (ISP), have attempted to tap into the enormous built in membership of various special interest groups. The present system solves the problem of distributing the network access system by marketing to a specific target group or a special interest group ("SIG"), such as a religious organization, school, non-profit organization, a charitable organization, such as the American Cancer Society, and the like. Each SIG receives commissions, free advertisements or the like for enrolling subscribers.

Additionally, there has been much press in recent months over public desire to restrict access to unsuitable web sites on the Internet. Extremely violent events have served to heighten awareness that access by minors to violent, hate oriented web sites is problematic. The Supreme Court's finding that the Telecommunications Reform Act was unconstitutional has taken content restriction out of the purview of the government and planted it squarely on the shoulder of parents and/or other persons in loci parenti. Current techniques for content filtering can be categorized into two general classes: server side or user side filtering. In the server side filtering, the content is filtered by network servers, such as internet service providers ("ISP"), whereas in the user side filtering, the content is filtered by user's personal computer ("PC"), specifically by a memory resident program in the PC. Accordingly, it is desirable to market and distribute a filtered network access system in a multi-tiered distribution channel. However, the currently available filtered systems are either easily disabled by a precocious minor or difficult to configure by the user, i.e. , parents. Generally, the server side filters employ one of two techniques. The filtering parameters are predetermined by the ISP in the first method and all users are subject to the same parameters. This method does not permit the users to individually configure the filtering parameters to suit their own preferences and values. The second method resolves this problem by permitting each user to set his/her own parameters that are stored on the ISP server. Since the filter parameters/settings are now accessible by the user, a precocious minor can, from the user side of the Internet connection, modify the settings and effectively defeat the filtering software. The second method effectively eliminates the security advantage of storing the filter settings on the server and the filters must be kept current via frequent downloads. Additionally, the second method requires the parents to be fairly computer literate to configure and set the filtering parameters. Quite often the child is more computer savvy than the parent. Therefore, it is desirable to have a filtering method that provides both user configurable filter parameters and the advantage of storing the filter settings on the server.

The second class of content filters are user side filters and are generally based on software residing on the user's PC. The user must first install the software on his PC and set the filter parameters to establish an acceptable level of content filtering. However, with approximately 200-300 adult oriented web sites coming online each day, the user must obtain and install updates to the filter software on a regular basis. This can be both time consuming and may lead to undesirable or unacceptable filtering results if the filter software is improperly updated. Hence, the frequency of the updates is a major drawback to this method. Another drawback is the ease with which such filters may be disabled by a precocious minor, such as disabling the filtering software by deleting the directory which contains the filtering program. Additionally, this method does not provide for a minimum level of filtering when the user side filter parameters are defeated, modified or disabled. Accordingly, it is desirable to have filtering software that is easily configurable by the user (parents) and yet difficult to disable by a precocious minor so as to restrict a minor's access to undesirable contents on the Internet.

Accordingly, the current filter system of the present invention solves the problem of disablement of user side filters while providing a minimum level of filtering which parents can rely on. The present invention provides parents with a minimum level of filtering even if they do not set the user side filter parameters. The parents may not computer savvy enough to configure the filter settings or may simply forget to set them. SUMMARY OF THE INVENTION

Accordingly, it is an object of the present invention to provide a novel method of marketing and selling a network access service in a multi-tiered distribution chain.

It is another object of the present invention to market the network access service to special interest groups for distribution to their members.

It is still another object of the present invention to permit subscribers of a network service provider to allocate a portion of their subscription fee to one or more charitable or religious organization.

It is yet still another object of the present invention to provide a minimum level of content filtering that cannot be disabled by the user while providing a parent of a minor or a person in loci parenti with the ability to set additional parameters that cannot be easily disabled by the minor.

It is further object of the present invention to provide a smart agent to check the user's PC to determine if the user side filters are active. It is yet another object of the present invention to utilize the aforementioned smart agent to initialize downloading, set-up and/or loading of the filter on the user's PC if the user side filters are determined to be inactive. BRIEF DESCRIPTION OF THE DRAWINGS

The following detailed description, given by way of example, and not intended to limit the present invention solely thereto, will best be understood in conjunction with the accompanying drawings in which:

Fig. 1 is a block diagram of an Internet access or filtering system employing the present invention;

Fig. 2 is a flow chart describing the operation of the filtering system of the present invention;

Fig. 3 is a flow chart describing the login process;

Fig. 4 is a flow chart describing the marketing/distribution process of the present invention; and

Fig. 5 is a block diagram of an embodiment of the network server of Fig. 1. DETAILED DESCRIPTION OF THE EMBODIMENTS

The present invention is readily implemented by presently available communication apparatuses and electronic components. The invention finds ready application in virtually all communication systems, including but not limited to the internet, private or public network, cable network, satellite network, wireless network and the like. In a preferred embodiment, the present invention relates to marketing and distributing a conventional web browser system in a multi-tier distribution network. Alternatively, the web browser may include a filtering program.

Turning now to Fig. 4, there is shown an example of the marketing and distribution system 400 of the present invention. The system 400 includes an ISP 410 marketing network or web access services (hereinafter referred to as the "Services") to end users 430 through one or more entities or special interest groups (SIGs) 420. The ISP 410 may perform all of its operations in-house or may out-source some or all of its functions to one or more third parties. It is appreciated that the SIGs 420 can be any for-profit or not-for- profit group, such as companies, unions, religious organizations, schools, charitable organizations, e.g. , the American Cancer Society and the like.

The ISP 410 provides conventional web browser software, such as Microsoft Explorer or Netscape Navigator to the SIGs 420 for distribution to their members or end users 430 in return for a share of the revenues, such as one time sign up fees or the subscription fees for the duration of the members use of the Services. Alternatively, the browser software may incorporate a conventional filtering system for restricting access to unsuitable web sites. Preferably, a tiered revenue structure can be used to encourage SIG to sign up more of its members to the Services. A tiered revenue share is an arrangement by which the percentage of revenues given to a particular SIG increases as more of its members subscribe to the Services.

Preferably, a compact disc (CD) or the like containing the browser software is provided at no cost to the SIG 420. The SIG 420 may then freely distribute the CD to its membership and other people associated with the SIG. It is appreciated that the browser software may be also downloaded from the ISP 410's web site. The end user 430 installs the browser software from the CD onto his personal computer (PC) 440. The end user 430 may complete the installation or registration process by registering with the ISP 410. The end user 430 connects his personal computer 440 to the ISP 410 via a dial-up connection using a predetermined telephone number, such as a national toll free number in the U.S, via local area network or by other comparable means. The end user 430 registers with the ISP 410 by providing user profile information, such as name, address, telephone number and the like, selects a unique user name and password and provides subscription fee payment information, such as a credit card number, expiration date and the like. Based on the area code of the end user's telephone number, the ISP 410 may provide a list of access telephone numbers to the end user 430 for establishing a dial-up connection. Alternatively, the list of access telephone numbers may be generated from the end user's zip code.

Each CD may be encrypted with a registration code uniquely identifying each SIG 420 or the end user 430 may be requested to provide a registration number on the CD during the registration process. It is appreciated the registration number may be imprinted on the surface of the CD or on the CD sleeve. The ISP 410 employs such registration code or number for establishing the source of the end user's CD, to thereby properly issue a check or credit the account of the SIG associated with the end user's registration code or number. Each SIG 420 may be motivated to participate in the CD distribution process because they may receive financial or other compensation from the ISP 410, such as a portion of the subscription fee (monthly, annual or the like) or predetermined, variable or user specified commission for each internet account established by the end user 430, hereinafter referred to as the SIG's end users. It is appreciated that the end user 430 may include a charitable contribution in addition to the subscription fee, thereby enabling the SIG 420 to efficiently collect contributions from its membership. For example, the SIG 420 may receive a personalized portal, a predetermined number of free internet account, free advertisement on the ISP's web sites and the like from the ISP 410.

The ISP 410 may provide a personalized portal to each SIG 420, wherein the SIG 420 may post organizational messages and information to its membership. Preferably, the SIG's portal is private such that only the SIG's end users or subscribers may access the portal. In accordance with an embodiment of the present invention, the ISP 410 may enable the SIG 420 to brand a start page or a portal page with SIG's own logo or insignia. Alternatively, the ISP 410 may maintain its own branding scheme and provide the SIG 420 with either secondary branding or no branding in order to create a stronger brand name associated with the ISP 410 and provide a regional, national and/or international presence for the ISP 410. It is appreciated that a "start page" generally refers to a web page that contains only information about a particular organization, such as a SIG 420. A "portal page" generally refers to a web page containing links to a number of web sites outside the SIG 420 (or web sites not controlled by the SIG 420) that may be of interest to SIG's members, such as web sites related to news, business, health, sports, etc.

Preferably, the portal page may be built in a modular fashion allowing for individual components to be taken from a pre-existing menu of components. For example, the menu may include a business news block, a sports news block or even a horoscope or comic strip block (each hereinafter referred to as a "Portal Block"). Each Portal Block can be a self- contained set of code which could be inserted into the portal page thereby creating a comprehensive portal page upon assembly of multiple Portal Blocks. It is appreciated that while the code can be self-contained not all of the data need to be contained in that Portal Block. That is, each block may include functions which would perform searches or lookups outside the Portal Block, such as data located in another Portal Block or elsewhere on the Internet. Preferably, no Portal Block would be dependent upon any other Portal Block thereby allowing any combination of Portal Blocks to be used to form a given portal page. In accordance with an embodiment of the present invention, the SIG 420 can use the

Portal Block to provide or disseminate information, such as organizational news, updates, calendar of events, etc., to its members. The ISP 410 can permit the SIG 420 to access a particular Portal Block to edit or update information on that Portal Block without necessarily reprogramming or redesigning the entire portal page. The ISP 410 can provide one-time or ongoing access to the Portal Block to the SIG 420. It is appreciated that the ISP 410 can provide access to different Portal Blocks over time.

In accordance with an alternative embodiment of the present invention, the ISP 410 may market the Services directly to potential subscribers who are not necessarily affiliated with any SIG 420 and permit the subscribers to allocate a portion of their subscription fee to one or more SIGs, i.e., charitable or religious organization. Turning now to Fig. 5, a registration or subscription module 510 of the present invention can present a list of available SIGs 420 to new subscribers or end users 430 as part of the ISP's subscription or registration process. For example, the subscriber can initiate the subscription process by accessing the subscription module 510 on the ISP's web site, e.g. , ISP or network server 110, through their current Internet access provider or by loading the CD and running the browser contained therein. In addition to providing user profile information, such as name, address, phone number, etc. , the new subscriber can select or designate one or more SIGs from a list of available SIGs to make his/her donation. If the new subscriber designates more than one SIG, then the subscription module 510 requests the subscriber to allocate the total donation among the SIGs, e.g., the subscriber assigns an allocation percentage to each SIG. After completing the registration process, the subscription module 510 stores the registration information provided by the new subscriber as a registration record in a user database 120. The ISP 410 then periodically distributes a portion of new subscriber's subscription fee (the "Revenue Share") to such designated SIG 420 in accordance with the allocation percentage specified in the subscriber's registration record. It is appreciated that the subscriber can select one or more SIGs 420 for such revenue sharing arrangement. Preferably, the Revenue Share is an amount above the market value of the Services (the "Service Value"), generally a fixed amount which may vary from time to time. In other words, the summation of the Revenue Share and the Service Value equals the subscription fee. By determining the Service Value and establishing the subscription fee to be greater than the Service Value, the subscriber 430 may treat the difference as a donation to the designated SIG or SIGs 420. This advantageously provides a tax deduction to the subscriber 430 pursuant to the U. S. Tax Code. Otherwise, under the U.S. Tax Code, any such difference may prohibit a tax deduction to the subscriber 430, but may provide a tax deduction to the ISP 410, i.e. , the difference is treated as a donation from the ISP 410 to the SIG or SIGs 420. It is appreciated that any future amendments to the U.S. Tax Code may eliminate such tax deduction for the subscriber 430 or may necessitate structural changes to the present revenue share arrangement to maintain such tax deduction.

A billing module 540 of the ISP 410 bills subscription fee as specified in the subscriber's registration record to the subscriber 430 via mail or e-mail on a periodic basis, such as monthly, quarterly, annually, etc. In both cases the subscriber must remit payments to the ISP 410. Preferably, the billing module 540 may automatically and periodically (i.e., monthly) deduct the subscription fee from the subscriber's bank account, credit card, debit card or the like. After receiving payments from the subscriber 430, the billing module 540 then distributes the corresponding Revenue Share to the designated SIGs in accordance with the allocation percentage specified in the subscriber's registration record. Preferably, the billing module 540 distributes the Revenue Share to the appropriate SIGs by automatically and periodically (i.e., quarterly) crediting their bank account, transmitting wire-transfers or the like. Additionally, at the end of the fiscal or calendar year, or at other appropriate time, the billing module 540 generates certificates or other documentation setting forth the subscriber's Revenue Share (i.e. , charitable donation) for tax purposes.

In the case where the subscriber 430 designates more than one SIG 420, the subscriber 430 may apportion the Revenue Share among the SIGs 420 in any manner he/she deems acceptable. Preferably, the subscription module 510 of the ISP 410 stores or updates the subscriber's registration record with a list of designated SIGs along with its corresponding allocation percentage of the Revenue Share. For example, if the value of the Services is twelve dollars per month and the subscription fee is twenty dollars per month, then a revenue allocation module 530 allocates or distributes the Revenue Share of eight dollars among the designated SIGs 420 in accordance with the stored allocation percentage as specified in the subscriber's registration record. Accordingly, each designated SIG 420 may receive the same amount or receive an amount different from each other, or one designated SIG 420 may receive the entire Revenue Share. Preferably, the subscriber 430 can access the revenue allocation module 530 to increase the subscription fee above the amount established by the ISP 410, thereby increasing the amount of the Revenue Share. The revenue allocation module 530 then automatically updates the subscriber's registration record to reflect these changes associated with the Revenue Share. It is appreciated that under such scenario the Service Value remains unchanged to enable the subscriber 430 to donate additional money to the designated SIGs.

Any registered subscriber or end user 430 whether or not affiliated with a SIG 420 can access the revenue allocation module 530 to change or update the SIG designation in the subscriber's registration record, such as adding or removing a SIG 420 and/or to increase the subscription payment, thereby increasing the amount of the Revenue Share. That is, for example, an end user 430 subscribing to the Services through one SIG (i.e., American Cancer Society) can also designate another SIG (i.e., American Red Cross), thereby enabling the subscriber or end user 430 to donate to both SIGs. The actual distribution of the Revenue Share to the SIGs will be in accordance with the stored allocation percentage information in the subscriber's registration record, e.g. , 60% of the Revenue Share to the American Red Cross and 40% to the American Cancer Society. Preferably, at any time, the subscriber 430 may access the revenue allocation module 530 to change the allocation percentage among the designated SIGs or change the designated SIGs by adding or deleting SIG from the subscriber's list of designated SIGs. Further, if a subscriber seeks to designate a SIG that is not on the list of available SIGs, an automated notification module 560 of the present invention alerts the ISP administrator to add the desired SIG to the list of available SIGs.

In accordance with an embodiment of the present invention, when a subscriber 430 designates a SIG to receive a portion of the Revenue Share, a linking module 550 of the present invention establishes a link to the SIG's web site, if one exists, and adds the link to the portal page that is associated with that particular subscriber as well as a record file or a "cookie" on the subscriber's PC 440. Generally, a "cookie" is a tiny element of data that is used to identify subscribers and prepare customized web pages for the subscribers. For example, instead of seeing just a generic welcome page, the subscriber may see a personalized welcome page. Alternatively, the linking module 550 adds a Portal Block associated with that particular SIG to the subscriber's portal page. It is appreciated that the linking module 550 automatically stores such links and Portal Block as part of the subscriber's registration record. When a subscriber logs on for Services with the ISP 410, an access or logon module 520 of the present invention verifies that the subscriber is registered to receive the Services from the ISP 410 and provides the appropriate portal page. For example, the logon module 520 can retrieve the subscriber's registration record from the database to obtain the appropriate portal page information from the database or from the "cookie" store on the subscriber's PC 440.

In accordance with another embodiment of the present invention, the ISP 410 may employ a centralized network filter to provide content monitored web access to the end users 430. The network filter may prevent the end user from accessing or retrieving pages from web sites that are deemed unsuitable by the ISP 410. Also, the network filter may prevent access to unsuitable e-mails, chat groups and the like. For example, the network filter may perform dynamic document review on e-mails, chat group discussions and other documents to search for undesirable word patterns. Any document containing the undesirable word patterns may be inaccessible by the end user. Each SIG 420 may specify additional filter parameters, hereinafter referred to as the SIG filter, that would apply only to its end users or members. The ISP 410 may set and store the network and SIG filters on its servers so as to insure that the filter settings are not accessible by outsiders, including the SIG 420 and the end users 430. Alternatively, the SIG may be given access to the SIG filter settings so as to permit the SIG to set, edit and/or update its filter settings.

Accordingly, the ISP 410 may restrict the internet access for a particular end user 430 by employing the network filter and the SIG filter corresponding to the end user's registration code or number. For example, the ISP 410 utilizing the network filter may restrict access to pornographic web sites and a SIG 420, such as a coalition for gun control, may use the SIG filter to further restrict access to any web sites promoting and/or marketing guns. Another SIG 420, such as a coalition for nonsmokers, may use the SIG filter to restrict access to any web sites marketing and/or promoting the use of tobacco. It is appreciated that the members (end users) of the coalition for nonsmokers may not access the pornographic (network filter) and tobacco (SIG filter) related web sites, but may access the gun related sites. Whereas, the members of the coalition for gun control may not access the pornographic and gun related web sites, but may access the tobacco related sites. Therefore, the present invention permits a particular SIG to customize the filters to restrict access to web sites that are contrary to its mission and purpose, thereby enabling the SIG to filter web sites that may be objectionable to its member. Although Fig. 4 depicts only one level, it is appreciated that the multi-tier marketing and distribution system 400 may include many levels. For example, the SIG 420 may distribute the CD containing the browser software to another SIG who may ultimately distribute the CD to the end user 430. Alternatively, the ISP 410 may provide a predetermined or variable commission to the current internet account holder for enrolling a new end user. Turning now to Fig. 1, there is shown the access control or filtering system 100 of the present invention. The filtering system 100 comprises a network filter and a user filter resident in the subscriber's terminal 200. Although not described in detail, it will be appreciated that the terminal 200 may be a conventional computer, such as an IBM- compatible personal computer (PC), an Apple Macintosh computer, a remote access device, such as a web enabled personal digital assistant or web enabled phone, or the like. The network filter is implemented with one or more servers 110, one or more user databases 120, one or more filter databases 130, all connected to each other over a remote network 190. Each subscriber/user logs onto his ISP by establishing a connection between his terminal 200 and the network servers 110 via a dial-up connection 140, via local area network (LAN) router 150 or by other comparable means.

The network servers 110 are also connected to the Internet or other public/private network 160 through a firewall router 170. A world wide web (WWW) and file transmission protocol (FTP) server 180 may be separately connected to the internet 160 through the firewall router 170 for preventing outsiders from accessing the web and ftp sites of the network 190. It is appreciated that the network server 110 may represent an ISP.

The filtering system 100 may provide content monitored internet access for children using a centralized network filter to provide a predetermined minimum level of content filtering and a user configurable filter for additional level of content filtering. It is appreciated that the subscriber, generally the parent, does not necessarily select each individual web site to restrict, but may select content categories to filter and the level of such filtering. In other words, the parent (subscriber) may select to restrict access to pornographic sites and may specify to restrict all pornographic sites or sites exceeding certain ratings. It is appreciated that web site ratings may be obtained from a third party or developed independently by the ISP, the provider of the filtering system.

The filtering system 100 may prevent access to web sites that are determined to be unsuitable in accordance with the predetermined level of content filtering. That is, all communications initiated by the user to web sites that are on the "forbidden" list are denied, while access to all other web sites is allowed by default. Alternatively, the filtering system 100 may permit access only to content approved web sites in accordance with the predetermined level of content filtering. That is, all communications initiated by the user to web sites that are on the permit list are allowed, while access to all other web sites is denied by default. It is appreciated that the filtering system 100 may also be used to offer both content monitored "children" internet accounts as well as unrestricted "adult" accounts using the same network server 110. The filtering system can further provide content monitored internet access from school LANs using router 150.

Turning now to a flow chart of Fig. 2 describing the operation of the filtering system of the present invention. A user, a child at school or at home, may use the internet browser incorporating the filtering system 100 of the present invention to access the world wide web at step 1000. The user may request web pages from the network server 100 by entering an appropriate uniform resource locator (URL), such as "http://www.ibm.com" . The network server 110 transmits a request for a web page to the IBM server 210 via the internet 160 at step 1010. In response to the user's request, the IBM server 210 supplies the requested web page to the network server 110 at step 1020. The network (server side) filter resident in the network server 110 determines whether the requested web page is on the server's forbidden list, which is stored in the filter database 130, at step 1030. If the requested web page is determined to be on the server's forbidden list, then the network server 110 sends a "FORBIDDEN" web page message or the like to be displayed on the user's terminal 200 at step 1040. It is appreciated that the user may receive such "FORBIDDEN" web page message if the user requests a web page from the playboy server 220.

If the requested web page is determined not to be on the server's forbidden list, the network sever 110 sends the web page to the user configurable filter (user side filter) resident in the user's terminal 200 for additional filtering at step 1050. The user side filter determines whether the requested web page is on the user's forbidden list at step 1060. The user's forbidden list may be stored in the user's terminal 200. If the requested web page is determined to be on the user's forbidden list, then the user's terminal 200 displays a "FORBIDDEN" web page message at step 1070.

If the requested web page is determined not to be on the user's forbidden list, the requested web page is then displayed on the user terminal 200 at step 1080. Turning now to a flow chart of Fig. 3 describing the process of logging onto the network server 110. Although the flow chart of Fig. 3 depicts the user logging onto the network server 110 via a dial-up connection 140, it is appreciated that the user may also log onto the network server 110 via LAN router 150 as shown in Fig. 1. The user at terminal 200 requests a dial-up connection 140 with the network server 110 using a predetermined telephone number. It is appreciated that the dial-up connection 140 may be over a ordinary telephone line, an ISDN line, a Tl line, a DSL line, a cable, a wireless connection or the like.

It is noted that only authorized users/subscribers are permitted to be connected to the network server 110 and each authorized subscriber is assigned a unique subscriber ID and a password, which are stored in the user database 120. It is appreciated that the user databases 120 and filter databases 130 may be combined to form a single database.

A user enters a subscriber ID and a password on the terminal 200 to initiate a network connection between the terminal 200 and one of the network servers 110 at step 2000. The network server 110 determines if the user is an authorized user at step 2010. The user is deemed to be an authorized user if the subscriber ID and the password received from the user matches one of the stored subscriber ID and password combination in the user database 120. Alternatively, the user's subscriber ID and password may be stored in the user's terminal 200 and forwarded to the network server 110 at step 2000. If the network server 110 determines that the user is an authorized user, the network server 110 then establishes a network connection with the user's terminal 200 and transmits the smart agent to the user's terminal 200 at step 2020. It is appreciated that the smart agent may represent a segment of the code that determines if a particular condition exists or is satisfied, such as an existence of filtering software. The smart agent determines if the user side filter, i.e. , software application, is currently running on the terminal 200 at step 2030.

If it is determined that the user side filter is currently active (or running) on the user's terminal 200, then the login process is completed at step 2040 and the authorized user may request any web page from the internet consistent with the server and user filter settings. However, if it is determined that the user side filter is not currently active on the user's terminal 200, the smart agent then determines if the user side filter resides on the user's terminal 200 at step 2050, preferably the "C" drive of the user's terminal 200.

If it is determined that the user side filter resides on the user's terminal 200, then the smart agent initiates the user side filter at step 2060. However, if it is determined the user side filter does not reside on the user's terminal 200, then the smart agent downloads the user side filter software from the filter database 130 via the network server 110 at step 2070.

The smart agent installs the user side filter on the user's terminal 200, preferably on its hard disk, such as "C" drive, and initiates the user side filter by loading into the memory of the terminal 200 at step 2080. Also, the smart agent reads the user filter parameters file, i.e., user's forbidden list, and makes the list accessible to the user side filter by loading into the memory of the terminal 200 at step 2090, thereby completing the login process.

Preferably, the user side filter may be placed in the TCP-IP stack to prevent a precocious minor from disabling the user side filter after the completion of the login process. It is appreciated that the network connection may be dependent on the TCP-IP stack and any tampering of the user side filter will adversely affect the TCP-IP stack, thereby terminating the network connection. Alternatively, if the user side filter is disabled after the completion of the login process, the network connection may be terminated. It is appreciated that the shut down process of the user side filter may include the termination of the network connection. Alternatively, ping signals may be employed to determine if the user side filter has been disabled. For example, the user side filter may transmit a ping signal to the network server 110 every predetermined period, such as 5 minutes, and the network server 110 may terminate the network connection if the ping signals are not received for two consecutive predetermined periods. Nevertheless, since the server side filters are not accessible by the user, even if the user side filters are disabled, the filtering system 100 of the present invention always provides some minimum level of content filtering.

In accordance with another embodiment of the present invention, the marketing/distribution process of Fig.4 may additionally employ the internet access or filtering system of Fig. 1 to provide both server side and user side filtering. This embodiment will be discussed in conjunction with the flow chart of Fig. 2, identifying only those steps that differ substantially from the operation of the filtering system of Fig. 1. At step 1030, the network filter resident in the network server 110 determines whether the requested web page is on the server's forbidden list, which is stored in the filter database 130. If the requested web page is determined to be on the server's forbidden list, the network server 110 sends a "FORBIDDEN" web page message or other comparable message to be displayed on the user's terminal 200 at step 1040.

If the requested web page is determined not to be on the server's forbidden list, the network server 110 then determines whether the requested page is on the SIG's forbidden list, which is also stored in the filter database 130. If the requested web page is determined to be on the SIG's forbidden list, the network server 100 sends a "FORBIDDEN" web page message or other comparable message to be displayed on the user's terminal 200 at step 1040.

If the requested web page is determined not to be on the SIG's forbidden list, the network server 100 sends the web page to the user configurable filter (user side filter) resident in the user's terminal 200 for additional filtering at step 1050.

While the present invention has been particularly described with respect to the illustrated embodiment, it will be appreciated that various alterations, modifications and adaptations may be made based on the present disclosure, and are intended to be within the scope of the present invention. It is intended that the appended claims be interpreted as including the embodiment discussed above, those various alternatives which have been described and all equivalents thereto.

Claims

WHAT IS CLAIMED:

1. A method of selling network access services to a plurality of users in a multi- tier distribution chain, comprising the steps of: marketing the network access services to said users by a plurality of entities on behalf of a network access provider; registering a user associated with an entity as a subscriber by the network access provider; receiving a subscription fee by the network access provider from said subscriber; and distributing a portion of said subscription fee to said entity associated with said subscriber.

2. The method of claim 1, wherein said entity is a charitable organization and the portion of said subscription fee is a charitable donation from said subscriber to said charitable organization.

3. The method of claim 2, wherein said subscription fee exceeds the market value of the network access services.

4. The method of claim 1, wherein the step of registering includes the steps of: providing user profile information by said subscriber; selecting one or more entities for distributing the portion of said subscription fee by said subscriber to provide selected entities; allocating an allocation percentage of the portion of said subscription fee to each selected entity; and storing said selected entities and the corresponding allocation percentage.

5. The method of claim 4, wherein the step of distributing allocates the portion of said subscription fee to said selected entities in accordance with the corresponding allocation percentages.

6. The method of claim 1, wherein the step of marketing includes the step of distributing the network access provider's web browsers to said users by said entities.

7. The method of claim 6, wherein each web browser includes a filter to restrict access to unsuitable web sites.

8. The method of claim 6, wherein each web browser includes a network filter residing on a server associated with the network access provider to restrict access to web sites deemed unsuitable by the network access provider.

9. The method of claim 8, wherein each web browser further includes an entity filter residing on said server to restrict access to web sites deemed unsuitable by said entity.

10. The method of claim 9, wherein said subscriber being a parent of a minor; and wherein each web browser further includes a user filter residing on a computer associated with said subscriber to restrict access to web sites deemed unsuitable by said parent, thereby preventing said minor from accessing unsuitable web sites.

11. The method of claim 10, wherein said user filter includes a smart agent residing on said computer to determine the status of said user filter.

12. The method of claim 11 , further comprising the step of installing said user side filter on said computer if it is determined that the status of said user filter is inactive.

13. The method of claim 11 , further comprising the step of denying network access services to said subscriber if it is determined that the status of said user filter is inactive.

14. A method of marketing and selling network access services to a plurality of users, comprising the steps of: marketing the network access services for a subscription fee to said users; registering said users as subscribers by the network access provider; designating one or more charitable entities to receive a portion of said subscription fee by each subscriber; and allocating an allocation percentage of the portion of said subscription fee to each designated entity by said each subscriber.

15. The method of claim 14, further comprising the steps of: receiving the subscription fee by the network access provider from said subscribers; and distributing the portion of said subscription fee to said designated entities in accordance with said allocation percentage for said each subscriber.

16. The method of claim 14, wherein the portion of said subscription fee is a charitable donation from said each subscriber.

17. The method of claim 16, wherein said subscription fee exceeds the market value of the network access services.

18. The method of claim 14, further comprising the step of linking a web site associated with said network access provider to web sites associated with said designated entities.

19. A system for selling network access services to a plurality of users in a multi-tier distribution chain, comprising: a subscription module for registering a user associated with an entity as a subscriber by a network access provider and storing registration information of said subscriber in a database, said entity marketing the network access service to a plurality of users on behalf of the network access provider; and a billing module for automatically and periodically billing a subscription fee by the network access provider to said subscriber and automatically distributing a portion of said subscription fee to said entity associated with said subscriber.

20. The system of claim 19, wherein said entity is a charitable organization and the portion of said subscription fee is a charitable donation from said subscriber to said charitable organization.

21. The system of claim 20, wherein said subscription fee exceeds the market value of the network access services.

22. The system of claim 19, wherein the registration information includes user profile information of said subscriber; and wherein said subscription module is operable to provide a list of SIGs, thereby enabling said subscriber to select one or more entities for distributing the portion of said subscription fee and to allocate an allocation percentage of the portion of said subscription fee to each selected entity, and storing said selected entities and the corresponding allocation percentages in said database.

23. The system of claim 20, wherein said billing module is operable to allocate and distribute the portion of said subscription fee to said selected entities in accordance with the corresponding allocation percentages.

24. The system of claim 19, wherein said entity distributes the network access provider's web browsers to said plurality of users.

25. The system of claim 24, wherein each web browser includes a filter to restrict access to unsuitable web sites.

26. The system of claim 24, wherein each web browser includes a network filter residing on a server associated with the network access provider to restrict access to web sites deemed unsuitable by the network access provider.

27. The system of claim 26, wherein each web browser further includes an entity filter residing on said server to restrict access to web sites deemed unsuitable by said entity.

28. The system of claim 27, wherein said subscriber being a parent of a minor; and wherein each web browser further includes a user filter residing on a computer associated with said subscriber to restrict access to web sites deemed unsuitable by said parent, thereby preventing said minor from accessing unsuitable web sites.

29. The system of claim 28, wherein said user filter includes a smart agent residing on said computer to determine the status of said user filter.

30. The system of claim 29, wherein said smart agent is operable to install said user side filter on said computer if it is determined that the status of said user filter is inactive.

31. The system of claim 29, wherein said server is operable to deny network access services to said subscriber if it is determined that the status of said user filter is inactive.

32. A system for marketing and selling network access services to a plurality of users, comprising: a subscription module for registering users as subscribers for registration fees by a network access provider and storing registration information of said subscribers in a database; and a revenue allocation module for designating one or more charitable entities to receive a portion of said subscription fee by each subscriber, allocating an allocation percentage of the portion of said subscription fee to each designated entity by said each subscriber, and storing said designated entities and the corresponding allocation percentages in said database.

33. The system of claim 32, further comprising a billing module for automatically and periodically billing a subscription fee by the network access provider to said subscriber and automatically distributing a portion of said subscription fee to said designated entities in accordance with said allocation percentages for said each subscriber.

34. The system of claim 32, wherein the portion of said subscription fee is a charitable donation from said each subscriber.

35. The system of claim 34, wherein said subscription fee exceeds the market value of the network access services.

36. The system of claim 32, further comprising a linking module for linking a web site associated with said network access provider to web sites associated with said designated entities.