Method and system for controlling access to network resources based on connection security

• US 20020178365A1
• Filed: 05/24/2001
• Published: 11/28/2002
• Est. Priority Date: 05/24/2001
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Yamaguchi, Shingo
• Application Number:
  US09/863,384
• Publication Number:
  US 20020178365A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method and system for controlling a network, such as a computer network. A computer network connection is established between one or more computers or computing devices and an intermediate device to which network resources are connected. There is a controlling of a level of access of the computer or computing device to the network resources based on the level of security of the computer network connection between the computer or computing device and the intermediate device. Such a controlling may be performed by the intermediate device, a separate firewall device, and/or components of a network operating system or network controlling software. The computing devices are connected to the intermediate device using a wireless connection, although as an alternative a wired connection may be utilized.

Claims

1. A method of controlling a network, comprising the steps of:

establishing a computer network connection between a computer and an intermediate device which has network resources connected thereto;

determining a level of security of the computer network connection; and

controlling a level of access of the computer to the network resources using the level of security of the computer network connection which has been determined.

2. A method according to claim 1, wherein said step of establishing comprises:

establishing a wireless computer network connection.

3. A method according to claim 1, wherein said step of establishing the wireless computer network connection comprises:

establishing a wireless computer network connection which conforms to an IEEE 802.11b standard.

4. A method according to claim 1, where the step of determining a level of security comprises:

determining whether the computer network connection is encrypted.

5. A method according to claim 1, wherein the step determining whether the computer network connection is encrypted comprises:

determining whether the computer network connection is encrypted using Wired Equivalent Privacy (“

WEP”

) encryption.

6. A method according to claim 1, wherein the step of controlling a level of access further comprises:

allowing the computer to access a file server which is one of the network resources, only when the step of determining the level of security determines that the computer network connection is encrypted.

7. A method according to claim 6, wherein the step of controlling a level of access further comprises:

allowing the computer to access the Internet which is one of the network resources, regardless of whether the computer network connection is encrypted.

8. A method according to claim 7, wherein the step of controlling a level of access further comprises:

allowing the computer to access an email server which is one of the network resources, regardless of whether the computer network connection is encrypted.

9. A method according to claim 7, wherein the step of controlling a level of access further comprises:

allowing the computer to access an email server which is one of the network resources, only when the computer network connection is encrypted.

10. A method according to claim 1, wherein:

the step of determining is performed by the intermediate device, and

the step of controlling is performed by the intermediate device.

11. A method according to claim 10, wherein:

the step of determining is performed by the intermediate device which is a router.

12. A method according to claim 11, wherein:

the step of controlling is performed by the intermediate device which is a router having a firewall operation.

13. A method according to claim 12, wherein:

the step of establishing is performed using the intermediate device which is a router which establishes a wireless connection to the computer.

14. A method according to claim 1, wherein:

the step of determining is performed by a server running a network operating system, the server being different from the intermediate device, and

the step of controlling is performed by the server running the network operating system.

15. A method according to claim 14, wherein:

the step of determining is performed by the server which is running a network directory service.

16. A method according to claim 14, wherein:

the step of establishing is performed by a bridge connected to the computer through the computer network connection.

17. A method according to claim 16, wherein:

the step of establishing is performed by the bridge connected to the computer through the computer network connection which is a wireless network connection.

18. A method according to claim 1, wherein the step of controlling comprises:

controlling the level of access by a stand-alone firewall device which is connected between the intermediate device and the network resources.

19. A method according to claim 18, wherein the step of determining comprises:

determining the level of security using the intermediate device.

20. A method according to claim 18, wherein the step of establishing comprises:

establishing the computer network connection as a wireless connection using the intermediate device.

21. A system for controlling a network, comprising:

means for establishing a computer network connection between a computer and an intermediate device which has network resources connected thereto;

means for determining a level of security of the computer network connection; and

means for controlling a level of access of the computer to the network resources using the level of security of the computer network connection which has been determined.

22. A system according to claim 21, wherein said means for establishing comprises:

means for establishing a wireless computer network connection.

23. A system according to claim 21, wherein said means for establishing the wireless computer network connection comprises:

means for establishing a wireless computer network connection which conforms to an IEEE 802.11b standard.

24. A system according to claim 21, where the means for determining a level of security comprises:

means for determining whether the computer network connection is encrypted.

25. A system according to claim 21, wherein the step determining whether the computer network connection is encrypted comprises:

means for determining whether the computer network connection is encrypted using Wired Equivalent Privacy (“

WEP”

) encryption.

26. A system according to claim 21, wherein the means for controlling a level of access further comprises:

means for allowing the computer to access a file server which is one of the network resources, only when the means for determining the level of security determines that the computer network connection is encrypted.

27. A system according to claim 26, wherein the means for controlling a level of access further comprises:

means for allowing the computer to access the Internet which is one of the network resources, regardless of whether the computer network connection is encrypted.

28. A system according to claim 27, wherein the means for controlling a level of access further comprises:

means for allowing the computer to access an email server which is one of the network resources, regardless of whether the computer network connection is encrypted.

29. A system according to claim 27, wherein the means for controlling a level of access further comprises:

means for allowing the computer to access an email server which is one of the network resources, only when the computer network connection is encrypted.

30. A system according to claim 21, wherein:

the means for determining is the intermediate device, and

the means for controlling is the intermediate device.

31. A system according to claim 30, wherein:

the means for determining is the intermediate device which is a router.

32. A system according to claim 31, wherein:

the means for controlling is the intermediate device which is a router having a firewall operation.

33. A system according to claim 32, wherein:

the means for establishing is the intermediate device which is a router which establishes a wireless connection to the computer.

34. A system according to claim 31, wherein:

the means for determining is a server running a network operating system, the server being different from the intermediate device, and

the means for controlling is the server running the network operating system.

35. A system according to claim 34, wherein:

the means for determining is the server which is running a network directory service.

36. A system according to claim 34, wherein:

the means for establishing is a bridge connected to the computer through the computer network connection.

37. A system according to claim 36, wherein:

the means for establishing is the bridge connected to the computer through the computer network connection which is a wireless network connection.

38. A system according to claim 21, wherein the means for controlling comprises:

a stand-alone firewall device which is connected between the intermediate device and the network resources.

39. A system according to claim 38, wherein the means for determining comprises:

means for determining the level of security using the intermediate device.

40. A system according to claim 38, wherein the means for establishing comprises:

means for establishing the computer network connection as a wireless connection using the intermediate device.