Network filter

• US 10,681,142 B2
• Filed: 01/09/2014
• Issued: 06/09/2020
• Est. Priority Date: 01/09/2014
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Inventors: Ong, Ivan, Lowery, Clifton
• Primary Examiner(s): Zhang, Shirley X
• Application Number:
  US14/151,477
• Publication Number:
  US 20150195362A1
• Time in Patent Office: 2,343 Days
• Field of Search: None
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Systems and methods for managing a network are disclosed. One method can comprise transmitting a first identifier associated with a first service. Access to the first service can be provided to a user device using the first identifier. A filter element associated with the user device can be received. Transmission of a second identifier associated with a second service can be filtered based on the filter element, wherein filtering transmission inhibits access of the user device to the second service.

Claims

1. A method, comprising:

receiving, by a network device from a user device, a user device identifier, wherein the network device is configured to;

provide access to a first wireless network and a second wireless network,

wirelessly transmit a first service set identifier (SSID) that identifies the first wireless network, and

wirelessly transmit a second SSID that identifies the second wireless network;

sending, by the network device to a computing device, the user device identifier and a network device identifier, wherein the computing device is configured to manage a plurality of identifiers comprising the user device identifier and the network device identifier;

receiving, by the network device from the computing device based on an association between the user device identifier and the network device identifier, a filter list indicating the user device identifier;

filtering, by the network device based on the filter list, the second SSID such that the user device is inhibited from accessing the second wireless network; and

allowing, by the network device based on the filter list, the user device to access the first wireless network.

2. The method of claim 1, wherein the first wireless network is a private network.

3. The method of claim 1, wherein the second wireless network is a public network.

4. The method of claim 1, wherein the filter list comprises a media access control (MAC) filter list.

5. The method of claim 1, wherein filtering, by the network device based on the filter list, the second SSID such that the user device is inhibited from accessing the second wireless network is dependent upon the network device being located at a premises associated with a user of the user device.

6. The method of claim 1, wherein the second wireless network is accessible by the user device via a different network device located remotely from the network device.

7. The method of claim 1, wherein the network device comprises one or more of a wireless access point or a gateway.

8. The method of claim 1, wherein filtering, by the network device based on the filter list, the second SSID comprises filtering transmission of the second SSID.

9. A method, comprising:

providing, by a plurality of access points, access to a first wireless network, wherein each of the plurality of access points is configured to wirelessly transmit a first service set identifier (SSID) that identifies the first wireless network;

providing, by a first access point of the plurality of access points, access to a second wireless network, wherein the first access point is configured to wirelessly transmit a second SSID that identifies the second wireless network;

receiving, by the first access point, a first identifier associated with a user device;

sending, by the first access point to a computing device, the first identifier and a second identifier associated with the first access point;

receiving, by the first access point from the computing device based on an association between the first identifier and the second identifier, a filter list indicating the first identifier; and

filtering, by the first access point based on a location of the user device and based on the filter list, the first SSID such that the user device is inhibited from accessing the first wireless network while allowing the user device to access the second wireless network.

10. The method of claim 9, wherein the first wireless network is a public network.

11. The method of claim 9, wherein the second wireless network is a private network.

12. The method of claim 9, wherein the first identifier comprises one or more of a user identifier or a media access control (MAC) address.

13. The method of claim 9, wherein filtering, by the first access point based on the location of the user device and based on the filter list, the first SSID such that the user device is inhibited from accessing the first wireless network while allowing the user device to access the second wireless network is dependent upon the location of the user device being at a premises associated with a user of the user device.

14. The method of claim 9, wherein filtering, by the first access point based on the location of the user device and based on the filter list, the first SSID comprises filtering transmission of the first SSID.

15. The method of claim 9, wherein the first wireless network is accessible by the user device via a second access point of the plurality of access points located remotely from the first access point.

16. The method of claim 9, further comprising receiving, by the first access point from the user device, an access request that relates to the user device accessing the first wireless network or the second wireless network.

17. A method, comprising:

receiving, by a first access point from a user device, an access request, wherein the first access point is associated with a first identifier, wherein the user device is associated with a second identifier, and wherein the first access point is configured to provide access to a public wireless network and a private wireless network;

sending, by the first access point to a computing device, the first identifier and the second identifier;

receiving, by the first access point from the computing device based on an association between the first identifier and the second identifier, a filter list comprising the second identifier and an identifier of the public wireless network; and

filtering, by the first access point based on the filter list, the public wireless network such that the user device is inhibited from accessing the public wireless network while allowing the user device to access the private wireless network.

18. The method of claim 17, wherein the access request relates to the user device accessing the public wireless network or the private wireless network.

19. The method of claim 17, wherein the second identifier comprises one or more of a user identifier or a media access control (MAC) address.

20. The method of claim 17, wherein the filter list comprises a MAC filter list.

21. The method of claim 17, wherein filtering, by the first access point based on the filter list, the public wireless network such that the user device is inhibited from accessing the public wireless network while allowing the user device to access the private wireless network comprises filtering transmission of a network identifier associated with the public wireless network.

22. The method of claim 17, wherein filtering, by the first access point based on the filter list, the public wireless network such that the user device is inhibited from accessing the public wireless network while allowing the user device to access the private wireless network is dependent upon the first access point being located at a premises associated with a user of the user device.

23. The method of claim 17, wherein the public wireless network is accessible by the user device via a second access point located remotely from the first access point.